diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
new file mode 100644
index 000000000..61c4808a5
--- /dev/null
+++ b/.github/workflows/quality.yml
@@ -0,0 +1,36 @@
+name: Quality Checks
+
+on:
+  push:
+    branches: [master, main]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  checks:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up PHP
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.4'
+          extensions: curl, gd, mbstring
+          coverage: none
+
+      - name: Validate composer.json
+        run: composer validate --no-check-publish
+
+      - name: Install dependencies
+        run: composer install --no-interaction --no-progress
+
+      - name: Check view output escaping
+        run: composer xss:check
+
+      - name: Check code style
+        run: composer format:check
diff --git a/.php-cs-fixer.php b/.php-cs-fixer.php
index cfd47c661..de8924f05 100644
--- a/.php-cs-fixer.php
+++ b/.php-cs-fixer.php
@@ -4,6 +4,8 @@
     ->notPath('vendor')
     ->notPath('bootstrap')
     ->notPath('storage')
+    // Local development mounts a MySQL data directory here; it is not project code.
+    ->exclude('docker/data')
     ->in(__DIR__)
     ->name('*.php')
     ->notName('*.blade.php');
diff --git a/AGENTS.md b/AGENTS.md
index ff0cf1b81..fb710cc7f 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -29,7 +29,7 @@ Map-OS is an open-source Service Order and Business Management system built in P
    - Always format PHP code using project standards: `composer format` (which invokes `application/vendor/bin/php-cs-fixer fix`).
 2. **Security & Input/Output Handling:**
    - Always validate user input.
-   - Always escape output in views using `html_escape()`.
+   - **Always escape output in views.** Use the helpers in `application/helpers/general_helper.php`, picking the one that matches the output context (see table below). Never `echo` a database row, `$_GET`/`$_POST` value, session value or config value raw.
    - Never use raw SQL string concatenation; use CodeIgniter Query Builder or query bindings (`?` or `$this->db->where()`) to prevent SQL injection.
    - Never expose sensitive data (e.g., password hashes) in public models or API responses.
 3. **Database Changes:**
@@ -37,6 +37,45 @@ Map-OS is an open-source Service Order and Business Management system built in P
 4. **Commit Messages:**
    - Follow [Conventional Commits](https://www.conventionalcommits.org/): `feat`, `fix`, `docs`, `refactor`, `chore`, etc.
 
+## Output Escaping in Views
+
+Pick the escaper by the context the value lands in. Using the wrong one is a
+common source of XSS, so match the row, not just the habit.
+
+| Helper | Use for | Example |
+| --- | --- | --- |
+| `esc($v)` | HTML text and quoted attributes | `<td><?= esc($row->nome) ?></td>`, `value="<?= esc($row->nome) ?>"` |
+| `esc_js($v)` | JS string / value inside `<script>` | `var x = <?= esc_js($v) ?>;` |
+| `esc_json($v)` | Arrays and structs inside `<script>` | `var cfg = <?= esc_json($arr) ?>;` |
+| `esc_url($v)` | `href` / `src`; rejects `javascript:`, `data:` | `href="<?= esc_url($link) ?>"` |
+| `esc_css($v)` | Values inside a `style` attribute | `style="color: <?= esc_css($c) ?>"` |
+| `esc_msg($v)` | Flashdata messages shown in a SweetAlert2 popup | `Swal.fire({ text: <?= esc_msg($m) ?> })` |
+| `printSafeHtml($v)` | **Only** rich text from a WYSIWYG field (HTMLPurifier) | `<?= printSafeHtml($os->defeito) ?>` |
+| *none* | A value that already holds finished markup | `<?= $modalGerarPagamento ?>` |
+
+Note on `esc_url()` and `src`: it rejects `data:`, so an `<img src>` holding a
+data URI must use `esc()`, not `esc_url()`. The QR codes rendered by
+`getQrCode()` are data URIs, and passing them through `esc_url()` returns an
+empty string and silently drops the image.
+
+Additional rules:
+
+- Escape inside string concatenation part by part: `<?= esc($a->rua) . ', ' . esc($a->numero) ?>`.
+- In `<script>`, prefer `Swal.fire({ text: ... })` over `title:`/`html:` — those are parsed as HTML.
+- `esc()` inside `value="…"` is transparent to JavaScript, because the browser decodes entities before `.val()` returns the value.
+- `esc_js()` and `esc_json()` already include the surrounding quotes for scalars, so never add manual quotes: `"<?= esc_js($v) ?>"` emits `"\"value\""`. Write `<?= esc_js($v) ?>` bare.
+- For the same reason, never pass them to `JSON.parse()` — assign the value directly: `var cfg = <?= esc_json($arr) ?>;`.
+- `esc_json()` casts scalars to string, so an int or float arrives as a JS string, not a number. Only `bool` and `null` keep their own type (`true`/`false`/`null`). Arrays and objects are emitted as a JSON literal.
+- Values that intentionally carry pre-rendered markup (`$topo`, `$custom_error`, `$modalGerarPagamento`, and anything from `printSafeHtml()`) must not be escaped again — escape them where they are built instead. These come from `$this->load->view($name, $data, true)` or from markup the controller assembled, so they are already finished HTML. Escaping one is not redundant, it is destructive: `htmlspecialchars()` turns the markup into visible text **and neutralises any `<script>` nested inside it**, which silently disables whatever that view was included for.
+- Build URLs with `rawurlencode()` on each query value, then pass the result through `esc_url()`.
+- Run `composer xss:check` after editing views. It runs three checks: values that reach the page without an escaper, values whose type the escaper changes (such as a `JSON.parse()` fed an escaper), and pre-rendered markup wrongly wrapped in an escaper. If an omission is deliberate, record it with `composer xss:baseline` and explain it in `tools/xss-baseline.txt`.
+
+Note: `global_xss_filtering` in `application/config/config.php` is an input
+filter, not output encoding. It does not protect values read from the database
+and it rewrites legitimate input, so it is not a substitute for the escapers
+above.
+
+
 ## Security & Integrity Mandates
 
 - **Secrets:** Never log, print, or commit `.env` files, credentials, API keys, or database dumps.
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 6d9fef2a7..3a87cb24a 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -145,12 +145,13 @@ composer format
 Para apenas verificar, sem alterar os arquivos:
 
 ```bash
-application/vendor/bin/php-cs-fixer fix --dry-run --diff
+composer format:check
 ```
 
 Boas práticas adicionais:
 
-- Escape a saída nas views para evitar XSS: use `html_escape()` para texto e o helper `printSafeHtml()` (`application/helpers/general_helper.php`, baseado no HTMLPurifier) quando precisar renderizar HTML vindo do usuário.
+- Escape a saída nas views para evitar XSS: use o helper que corresponde ao contexto da saída — `esc()` para texto e atributos HTML, `esc_js()` / `esc_json()` dentro de `<script>`, `esc_url()` em `href`/`src`, `esc_css()` em `style` e `esc_msg()` para mensagens do SweetAlert2. Quando precisar renderizar HTML vindo do usuário, use `printSafeHtml()` (também em `application/helpers/general_helper.php`, baseado no HTMLPurifier). Nunca use `echo` direto em uma linha do banco, valor de sessão ou de configuração.
+- Rode `composer xss:check` depois de editar views: o comando falha se algum valor chegar à página sem escape. A tabela completa de helpers está em `AGENTS.md`.
 - Use o Query Builder do CodeIgniter ou *query bindings* nos models. **Nunca** concatene entrada do usuário em SQL.
 - Valide e autorize no controller: confira o ID recebido e a permissão do usuário antes de operar sobre o registro.
 - Siga o idioma já usado no arquivo que você está editando (o código do projeto mistura português e inglês; mantenha a consistência local em vez de renomear o entorno).
@@ -282,6 +283,7 @@ A descrição pode ser em português ou inglês — o histórico aceita ambos. P
 
 - [ ] O PR resolve **um** problema (evite juntar assuntos diferentes).
 - [ ] O código está formatado (`composer format`).
+- [ ] Se você editou views, `composer xss:check` passa.
 - [ ] Não há credenciais, `.env`, dumps de banco ou arquivos de IDE no diff.
 - [ ] A pasta `application/vendor/` não foi commitada.
 - [ ] Alterações de schema têm migration com `up()` e `down()`.
diff --git a/application/controllers/Mine.php b/application/controllers/Mine.php
index 370cc752e..8f65747f4 100644
--- a/application/controllers/Mine.php
+++ b/application/controllers/Mine.php
@@ -147,7 +147,9 @@ public function gerarTokenResetarSenha()
             // Mesma resposta de sucesso quando o e-mail não existe, para não
             // permitir enumeração de contas.
             log_info('Cliente solicitou alteração de senha para um e-mail inexistente.');
-            $this->session->set_flashdata('success', 'Solicitação realizada com sucesso! <br> Um e-mail com as instruções será enviado para ' . html_escape($emailSolicitado));
+            // A mensagem é escapada no momento da exibição (views com esc_msg),
+            // por isso o valor deve ser enviado puro.
+            $this->session->set_flashdata('success', 'Solicitação realizada com sucesso! <br> Um e-mail com as instruções será enviado para ' . $emailSolicitado);
             redirect(base_url() . 'index.php/mine');
         } else {
             $this->load->helper('string');
diff --git a/application/helpers/general_helper.php b/application/helpers/general_helper.php
index a5201e6a0..ab89aa36c 100644
--- a/application/helpers/general_helper.php
+++ b/application/helpers/general_helper.php
@@ -97,7 +97,181 @@ function json_decode_legacy(string $raw): mixed
     }
 }
 
+if (! function_exists('esc')) {
+    /**
+     * Escapa um valor para contexto de texto HTML ou atributo entre aspas.
+     *
+     * Use em `<?= esc($valor) ?>` dentro do corpo da pagina e dentro de
+     * atributos delimited por aspas (`value="<?= esc($valor) ?>"`).
+     *
+     * @param  mixed $value
+     */
+    function esc($value): string
+    {
+        if ($value === null || is_bool($value)) {
+            return '';
+        }
+
+        if (is_array($value) || is_object($value)) {
+            return '';
+        }
+
+        return htmlspecialchars((string) $value, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
+    }
+}
+
+if (! function_exists('esc_js')) {
+    /**
+     * Escapa um valor para contexto JavaScript.
+     *
+     * Use dentro de `<script>`, tanto em literais de string
+     * (`var x = <?= esc_js($v) ?>;`) quanto em interpolacoes de atributos
+     * JS. O `json_encode` com flags HEX garante que tanto `"` quanto
+     * `</script>` fiquem neutralizados.
+     *
+     * @param  mixed $value
+     */
+    function esc_js($value): string
+    {
+        return esc_json($value);
+    }
+}
+
+if (! function_exists('esc_json')) {
+    /**
+     * Codifica um valor como JSON seguro para ser embutido em `<script>`.
+     *
+     * Use para arrays/estruturas: `var cfg = <?= esc_json($arr) ?>;`.
+     *
+     * @param  mixed $value
+     */
+    function esc_json($value): string
+    {
+        $flags = JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT
+            | JSON_UNESCAPED_UNICODE | JSON_INVALID_UTF8_SUBSTITUTE;
+
+        if (is_bool($value)) {
+            return $value ? 'true' : 'false';
+        }
+
+        if ($value === null) {
+            return 'null';
+        }
+
+        if (is_array($value) || is_object($value)) {
+            $encoded = json_encode($value, $flags);
+
+            return $encoded === false ? 'null' : $encoded;
+        }
+
+        $encoded = json_encode((string) $value, $flags);
+
+        return $encoded === false ? '""' : $encoded;
+    }
+}
+
+if (! function_exists('esc_url')) {
+    /**
+     * Escapa uma URL para uso em `href`/`src`.
+     *
+     * Rejeita esquemas executaveis (`javascript:`, `data:`, `vbscript:`) e
+     * devolve string vazia, o que neutraliza ataques de URI execucao.
+     *
+     * @param  mixed $url
+     */
+    function esc_url($url): string
+    {
+        if ($url === null || is_array($url) || is_object($url) || is_bool($url)) {
+            return '';
+        }
+
+        $url = trim((string) $url);
+
+        if ($url === '') {
+            return '';
+        }
+
+        // Barras de controle e espacos internos sao removidos por alguns
+        // navegadores ao resolver a URL, o que permitiria contrabandear um
+        // esquema (ex.: "java\nscript:alert(1)"). Recusamos antes de decidir.
+        if (preg_match('/[\x00-\x20\x7F]/', $url)) {
+            return '';
+        }
+
+        // Ancoras, query strings e URLs relativas/associadas nao possuem
+        // esquema proprio, portanto nao podem trocar a origem da pagina.
+        $scheme = strtolower((string) parse_url($url, PHP_URL_SCHEME));
+
+        if ($scheme === '') {
+            return esc($url);
+        }
+
+        $allowed = ['http', 'https', 'mailto', 'tel', 'whatsapp', 'ftp', 'ftps'];
+
+        if (! in_array($scheme, $allowed, true)) {
+            return '';
+        }
+
+        return esc($url);
+    }
+}
+
+if (! function_exists('esc_css')) {
+    /**
+     * Escapa um valor para contexto de estilo em CSS inline.
+     *
+     * @param  mixed $value
+     */
+    function esc_css($value): string
+    {
+        if ($value === null || is_array($value) || is_object($value) || is_bool($value)) {
+            return '';
+        }
+
+        $value = trim((string) $value);
+
+        // Impede quebra de contexto e injecao de regras via `;`, `{` ou `}`.
+        $value = (string) preg_replace('/[^a-zA-Z0-9#%.,()\s\-_]/', '', $value);
+
+        return str_replace(['\\', '<', '>'], '', $value);
+    }
+}
+
+if (! function_exists('esc_msg')) {
+    /**
+     * Prepara uma mensagem de flashdata para exibicao em um alerta JS.
+     *
+     * As mensagens historicas carregam `<br>` para quebrar linha. Aqui o
+     * `<br>` e convertido em quebra de linha real e **toda** as demais
+     * marcacao e descartada, de forma que a mensagem nunca seja interpretada
+     * como HTML pelo alerta. Sempre devolver dentro de `esc_js()`, ex.:
+     *
+     *     Swal.fire({ icon: 'success', text: <?= esc_msg($msg) ?> });
+     *
+     * @param  mixed $message
+     */
+    function esc_msg($message): string
+    {
+        if ($message === null || is_array($message) || is_object($message) || is_bool($message)) {
+            return '""';
+        }
+
+        $message = (string) $message;
+        $message = (string) preg_replace('#<br\s*/?>#i', "\n", $message);
+        $message = strip_tags($message);
+
+        return esc_js($message);
+    }
+}
+
 if (! function_exists('printSafeHtml')) {
+    /**
+     * Sanitiza conteudo rico (HTML vindo de editor WYSIWYG) via HTMLPurifier.
+     *
+     * Use **apenas** para campos que legitimamente aceitam HTML
+     * (descricao de produto, defeito, observacoes, laudo tecnico, termo de
+     * garantia). Para texto simples e para atributos use `esc()`.
+     */
     function printSafeHtml(string $html): string
     {
         static $purifier = null;
diff --git a/application/views/arquivos/arquivos.php b/application/views/arquivos/arquivos.php
index 690ccd5c0..c839fc7fe 100644
--- a/application/views/arquivos/arquivos.php
+++ b/application/views/arquivos/arquivos.php
@@ -56,29 +56,29 @@
                         }
     foreach ($results as $r) : ?>
                             <tr>
-                                <td><?= $r->idDocumentos ?></td>
+                                <td><?= esc($r->idDocumentos) ?></td>
                                 <td>
                                     <?php if (@getimagesize($r->path)) : ?>
-                                        <a href="<?= $r->url ?>"> <img src="<?= $r->url ?> "></a>
+                                        <a href="<?= esc($r->url) ?>"> <img src="<?= esc($r->url) ?> "></a>
                                     <?php else : ?>
                                         <span>-</span>
                                     <?php endif ?>
                                 </td>
-                                <td><?= $r->documento ?></td>
+                                <td><?= esc($r->documento) ?></td>
                                 <td><?= date('d/m/Y', strtotime($r->cadastro)) ?></td>
-                                <td><?= $r->descricao ?></td>
-                                <td><?= $r->tamanho ?> KB</td>
-                                <td><?= $r->tipo ?></td>
+                                <td><?= esc($r->descricao) ?></td>
+                                <td><?= esc($r->tamanho) ?> KB</td>
+                                <td><?= esc($r->tipo) ?></td>
                                 <td><?php if ($this->permission->checkPermission($this->session->userdata('permissao'), 'vArquivo')) : ?>
                                         <a href="<?= base_url() ?>index.php/arquivos/download/<?= $r->idDocumentos; ?>" class="btn-nwe" title="Baixar Arquivo"><i class="bx bx-download"></i>
                                         <?php endif ?>
 
                                         <?php if ($this->permission->checkPermission($this->session->userdata('permissao'), 'eArquivo')) : ?>
-                                            <a href="<?= base_url() ?>index.php/arquivos/editar/<?= $r->idDocumentos ?>" class="btn-nwe3" title="Editar"><i class="bx bx-edit"></i></a>
+                                            <a href="<?= base_url() ?>index.php/arquivos/editar/<?= esc($r->idDocumentos) ?>" class="btn-nwe3" title="Editar"><i class="bx bx-edit"></i></a>
                                         <?php endif ?>
 
                                         <?php if ($this->permission->checkPermission($this->session->userdata('permissao'), 'dArquivo')) : ?>
-                                            <a href="#modal-excluir" style="margin-right: 1%" role="button" data-toggle="modal" arquivo="<?= $r->idDocumentos ?>" class="btn-nwe4" title="Excluir"><i class="bx bx-trash-alt"></i></a>
+                                            <a href="#modal-excluir" style="margin-right: 1%" role="button" data-toggle="modal" arquivo="<?= esc($r->idDocumentos) ?>" class="btn-nwe4" title="Excluir"><i class="bx bx-trash-alt"></i></a>
                                         </a>
                                     <?php endif ?>
                                 </td>
diff --git a/application/views/arquivos/editarArquivo.php b/application/views/arquivos/editarArquivo.php
index 990ab7aa0..76033ab86 100644
--- a/application/views/arquivos/editarArquivo.php
+++ b/application/views/arquivos/editarArquivo.php
@@ -1,5 +1,5 @@
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
 
 <div class="row-fluid" style="margin-top:0">
     <div class="span12">
@@ -11,30 +11,30 @@
                 <h5>Cadastro de Arquivo</h5>
             </div>
             <div class="widget-content nopadding tab-content">
-                <?php echo $custom_error; ?>
-                <form action="<?php echo current_url(); ?>" id="formArquivo" method="post" class="form-horizontal">
+                <?= $custom_error ?>
+                <form action="<?= current_url() ?>" id="formArquivo" method="post" class="form-horizontal">
 
 
                     <div class="control-group">
                         <label for="nome" class="control-label">Nome do Arquivo*</label>
                         <div class="controls">
-                            <input id="nome" type="text" name="nome" value="<?php echo $result->documento; ?> " />
+                            <input id="nome" type="text" name="nome" value="<?= esc($result->documento) ?> " />
 
-                            <input id="idDocumentos" type="hidden" name="idDocumentos" value="<?php echo $result->idDocumentos; ?> " />
+                            <input id="idDocumentos" type="hidden" name="idDocumentos" value="<?= esc($result->idDocumentos) ?> " />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="descricao" class="control-label">Descrição</label>
                         <div class="controls">
-                            <textarea rows="3" cols="30" name="descricao" id="descricao"><?php echo $result->descricao; ?></textarea>
+                            <textarea rows="3" cols="30" name="descricao" id="descricao"><?= esc($result->descricao) ?></textarea>
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="descricao" class="control-label">Data</label>
                         <div class="controls">
-                            <input id="data" type="text" class="datepicker" name="data" value="<?php echo date('d/m/Y', strtotime($result->cadastro)); ?>" />
+                            <input id="data" type="text" class="datepicker" name="data" value="<?= date('d/m/Y', strtotime($result->cadastro)) ?>" />
                         </div>
                     </div>
 
@@ -42,7 +42,7 @@
                         <div class="span12">
                             <div class="span6 offset3" style="display:flex;justify-content: center">
                                 <button type="submit" class="button btn btn-primary"><span class="button__icon"><i class="bx bx-sync"></i></span><span class="button__text2">Atualizar</span></button>
-                                <a href="<?php echo base_url() ?>index.php/arquivos" class="button btn btn-mini btn-warning"><span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
+                                <a href="<?= base_url() ?>index.php/arquivos" class="button btn btn-mini btn-warning"><span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
                             </div>
                         </div>
                     </div>
@@ -52,7 +52,7 @@
     </div>
 </div>
 
-<script src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
 <script type="text/javascript">
     $(document).ready(function() {
 
diff --git a/application/views/auditoria/logs.php b/application/views/auditoria/logs.php
index 9719ccbfa..87f4922b5 100644
--- a/application/views/auditoria/logs.php
+++ b/application/views/auditoria/logs.php
@@ -45,11 +45,11 @@
         </table>
     </div>
 </div>
-<?php echo $this->pagination->create_links(); ?>
+<?= $this->pagination->create_links() ?>
 
 <!-- Modal -->
 <div id="modal-excluir" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form action="<?php echo site_url('auditoria/clean') ?>" method="post">
+    <form action="<?= site_url('auditoria/clean') ?>" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h5>Limpeza de Logs</h5>
diff --git a/application/views/clientes/adicionarCliente.php b/application/views/clientes/adicionarCliente.php
index 13bc4adad..0fc1daa0c 100644
--- a/application/views/clientes/adicionarCliente.php
+++ b/application/views/clientes/adicionarCliente.php
@@ -1,6 +1,6 @@
-<script src="<?php echo base_url() ?>assets/js/jquery.mask.min.js"></script>
-<script src="<?php echo base_url() ?>assets/js/sweetalert2.all.min.js"></script>
-<script src="<?php echo base_url() ?>assets/js/funcoes.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.mask.min.js"></script>
+<script src="<?= base_url() ?>assets/js/sweetalert2.all.min.js"></script>
+<script src="<?= base_url() ?>assets/js/funcoes.js"></script>
 <style>
     #imgSenha {
         width: 18px;
@@ -88,51 +88,51 @@
             <?php if ($custom_error != '') {
                 echo '<div class="alert alert-danger">' . $custom_error . '</div>';
             } ?>
-            <form action="<?php echo current_url(); ?>" id="formCliente" method="post" class="form-horizontal">
+            <form action="<?= current_url() ?>" id="formCliente" method="post" class="form-horizontal">
                 <div class="widget-content nopadding tab-content">
                     <div class="span6">
                         <div class="control-group">
                             <label for="documento" class="control-label">CPF/CNPJ</label>
                             <div class="controls">
-                                <input id="documento" class="cpfcnpj" type="text" name="documento" value="<?php echo set_value('documento'); ?>" />
+                                <input id="documento" class="cpfcnpj" type="text" name="documento" value="<?= set_value('documento') ?>" />
                                 <button id="buscar_info_cnpj" class="btn btn-xs" type="button">Buscar(CNPJ)</button>
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="nomeCliente" class="control-label">Nome/Razão Social<span class="required">*</span></label>
                             <div class="controls">
-                                <input id="nomeCliente" type="text" name="nomeCliente" value="<?php echo set_value('nomeCliente'); ?>" />
+                                <input id="nomeCliente" type="text" name="nomeCliente" value="<?= set_value('nomeCliente') ?>" />
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="contato" class="control-label">Contato:</label>
                             <div class="controls">
-                                <input class="contato" type="text" name="contato" value="<?php echo set_value('contato'); ?>" />
+                                <input class="contato" type="text" name="contato" value="<?= set_value('contato') ?>" />
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="telefone" class="control-label">Telefone</label>
                             <div class="controls">
-                                <input id="telefone" type="text" name="telefone" value="<?php echo set_value('telefone'); ?>" />
+                                <input id="telefone" type="text" name="telefone" value="<?= set_value('telefone') ?>" />
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="celular" class="control-label">Celular</label>
                             <div class="controls">
-                                <input id="celular" type="text" name="celular" value="<?php echo set_value('celular'); ?>" />
+                                <input id="celular" type="text" name="celular" value="<?= set_value('celular') ?>" />
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="email" class="control-label">Email</label>
                             <div class="controls">
-                                <input id="email" type="text" name="email" value="<?php echo set_value('email'); ?>" autocomplete="off" />
+                                <input id="email" type="text" name="email" value="<?= set_value('email') ?>" autocomplete="off" />
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="senha" class="control-label">Senha</label>
                             <div class="controls">
-                                <input class="form-control" id="senha" type="password" name="senha" autocomplete="new-password" value="<?php echo set_value('senha'); ?>" />
-                                <img id="imgSenha" src="<?php echo base_url() ?>assets/img/eye.svg" alt="">
+                                <input class="form-control" id="senha" type="password" name="senha" autocomplete="new-password" value="<?= set_value('senha') ?>" />
+                                <img id="imgSenha" src="<?= base_url() ?>assets/img/eye.svg" alt="">
                             </div>
                         </div>
                         <div class="control-group">
@@ -150,37 +150,37 @@
                         <div class="control-group" class="control-label">
                             <label for="cep" class="control-label">CEP</label>
                             <div class="controls">
-                                <input id="cep" type="text" name="cep" value="<?php echo set_value('cep'); ?>" />
+                                <input id="cep" type="text" name="cep" value="<?= set_value('cep') ?>" />
                             </div>
                         </div>
                         <div class="control-group" class="control-label">
                             <label for="rua" class="control-label">Rua</label>
                             <div class="controls">
-                                <input id="rua" type="text" name="rua" value="<?php echo set_value('rua'); ?>" />
+                                <input id="rua" type="text" name="rua" value="<?= set_value('rua') ?>" />
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="numero" class="control-label">Número</label>
                             <div class="controls">
-                                <input id="numero" type="text" name="numero" value="<?php echo set_value('numero'); ?>" />
+                                <input id="numero" type="text" name="numero" value="<?= set_value('numero') ?>" />
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="complemento" class="control-label">Complemento</label>
                             <div class="controls">
-                                <input id="complemento" type="text" name="complemento" value="<?php echo set_value('complemento'); ?>" />
+                                <input id="complemento" type="text" name="complemento" value="<?= set_value('complemento') ?>" />
                             </div>
                         </div>
                         <div class="control-group" class="control-label">
                             <label for="bairro" class="control-label">Bairro</label>
                             <div class="controls">
-                                <input id="bairro" type="text" name="bairro" value="<?php echo set_value('bairro'); ?>" />
+                                <input id="bairro" type="text" name="bairro" value="<?= set_value('bairro') ?>" />
                             </div>
                         </div>
                         <div class="control-group" class="control-label">
                             <label for="cidade" class="control-label">Cidade</label>
                             <div class="controls">
-                                <input id="cidade" type="text" name="cidade" value="<?php echo set_value('cidade'); ?>" />
+                                <input id="cidade" type="text" name="cidade" value="<?= set_value('cidade') ?>" />
                             </div>
                         </div>
                         <div class="control-group" class="control-label">
@@ -197,7 +197,7 @@
                     <div class="span12">
                         <div class="span6 offset3" style="display:flex;justify-content: center">
                             <button type="submit" class="button btn btn-mini btn-success"><span class="button__icon"><i class='bx bx-save'></i></span> <span class="button__text2">Salvar</span></a></button>
-                            <a title="Voltar" class="button btn btn-warning" href="<?php echo site_url() ?>/clientes"><span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
+                            <a title="Voltar" class="button btn btn-warning" href="<?= site_url() ?>/clientes"><span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
                         </div>
                     </div>
                 </div>
@@ -205,7 +205,7 @@
         </div>
     </div>
 </div>
-<script src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
 <script type="text/javascript">
     $(document).ready(function() {
         let container = document.querySelector('div');
@@ -215,19 +215,19 @@
         icon.addEventListener('click', function() {
             container.classList.toggle('visible');
             if (container.classList.contains('visible')) {
-                icon.src = '<?php echo base_url() ?>assets/img/eye-off.svg';
+                icon.src = '<?= base_url() ?>assets/img/eye-off.svg';
                 input.type = 'text';
             } else {
-                icon.src = '<?php echo base_url() ?>assets/img/eye.svg'
+                icon.src = '<?= base_url() ?>assets/img/eye.svg'
                 input.type = 'password';
             }
         });
 
-        $.getJSON('<?php echo base_url() ?>assets/json/estados.json', function(data) {
+        $.getJSON('<?= base_url() ?>assets/json/estados.json', function(data) {
             for (i in data.estados) {
                 $('#estado').append(new Option(data.estados[i].nome, data.estados[i].sigla));
             }
-            var curState = '<?php echo set_value('estado'); ?>';
+            var curState = '<?= set_value('estado') ?>';
             if (curState) {
                 $("#estado option[value=" + curState + "]").prop("selected", true);
             }
diff --git a/application/views/clientes/clientes.php b/application/views/clientes/clientes.php
index f8d046337..3e1ad8766 100644
--- a/application/views/clientes/clientes.php
+++ b/application/views/clientes/clientes.php
@@ -96,12 +96,12 @@
         </div>
     </div>
 </div>
-<?php echo $this->pagination->create_links(); ?>
+<?= $this->pagination->create_links() ?>
 
 <!-- Modal -->
 <div id="modal-excluir" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel"
     aria-hidden="true">
-    <form action="<?php echo base_url() ?>index.php/clientes/excluir" method="post">
+    <form action="<?= base_url() ?>index.php/clientes/excluir" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h5 id="myModalLabel">Excluir Cliente</h5>
diff --git a/application/views/clientes/editarCliente.php b/application/views/clientes/editarCliente.php
index 9a3b95e81..1d11a1385 100644
--- a/application/views/clientes/editarCliente.php
+++ b/application/views/clientes/editarCliente.php
@@ -1,6 +1,6 @@
-<script src="<?php echo base_url() ?>assets/js/jquery.mask.min.js"></script>
-<script src="<?php echo base_url() ?>assets/js/sweetalert2.all.min.js"></script>
-<script src="<?php echo base_url() ?>assets/js/funcoes.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.mask.min.js"></script>
+<script src="<?= base_url() ?>assets/js/sweetalert2.all.min.js"></script>
+<script src="<?= base_url() ?>assets/js/funcoes.js"></script>
 <style>
     #imgSenha {
         width: 18px;
@@ -88,52 +88,52 @@
             <?php if ($custom_error != '') {
                 echo '<div class="alert alert-danger">' . $custom_error . '</div>';
             } ?>
-            <form action="<?php echo current_url(); ?>" id="formCliente" method="post" class="form-horizontal">
+            <form action="<?= current_url() ?>" id="formCliente" method="post" class="form-horizontal">
                 <div class="widget-content nopadding tab-content">
                     <div class="span6">
                         <div class="control-group">
                             <label for="documento" class="control-label">CPF/CNPJ</label>
                             <div class="controls">
-                                <input id="documento" class="cpfcnpj" type="text" name="documento" value="<?php echo $result->documento; ?>" />
+                                <input id="documento" class="cpfcnpj" type="text" name="documento" value="<?= esc($result->documento) ?>" />
                                 <button id="buscar_info_cnpj" class="btn btn-xs" type="button">Buscar(CNPJ)</button>
                             </div>
                         </div>
                         <div class="control-group">
-                            <?php echo form_hidden('idClientes', $result->idClientes) ?>
+                            <?= form_hidden('idClientes', $result->idClientes) ?>
                             <label for="nomeCliente" class="control-label">Nome/Razão Social<span class="required">*</span></label>
                             <div class="controls">
-                                <input id="nomeCliente" type="text" name="nomeCliente" value="<?php echo $result->nomeCliente; ?>" />
+                                <input id="nomeCliente" type="text" name="nomeCliente" value="<?= esc($result->nomeCliente) ?>" />
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="contato" class="control-label">Contato:</label>
                             <div class="controls">
-                                <input class="contato" type="text" name="contato" value="<?php echo $result->contato; ?>" />
+                                <input class="contato" type="text" name="contato" value="<?= esc($result->contato) ?>" />
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="telefone" class="control-label">Telefone</label>
                             <div class="controls">
-                                <input id="telefone" type="text" name="telefone" value="<?php echo $result->telefone; ?>" />
+                                <input id="telefone" type="text" name="telefone" value="<?= esc($result->telefone) ?>" />
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="celular" class="control-label">Celular</label>
                             <div class="controls">
-                                <input id="celular" type="text" name="celular" value="<?php echo $result->celular; ?>" />
+                                <input id="celular" type="text" name="celular" value="<?= esc($result->celular) ?>" />
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="email" class="control-label">Email</label>
                             <div class="controls">
-                                <input id="email" type="text" name="email" value="<?php echo $result->email; ?>" />
+                                <input id="email" type="text" name="email" value="<?= esc($result->email) ?>" />
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="senha" class="control-label">Senha</label>
                             <div class="controls">
                                 <input id="senha" type="password" name="senha" value="" placeholder="Não preencha se não quiser alterar." />
-                                <img id="imgSenha" src="<?php echo base_url() ?>assets/img/eye.svg" alt="">
+                                <img id="imgSenha" src="<?= base_url() ?>assets/img/eye.svg" alt="">
                             </div>
                         </div>
                         <div class="control-group">
@@ -151,37 +151,37 @@
                         <div class="control-group" class="control-label">
                             <label for="cep" class="control-label">CEP</label>
                             <div class="controls">
-                                <input id="cep" type="text" name="cep" value="<?php echo $result->cep; ?>" />
+                                <input id="cep" type="text" name="cep" value="<?= esc($result->cep) ?>" />
                             </div>
                         </div>
                         <div class="control-group" class="control-label">
                             <label for="rua" class="control-label">Rua</label>
                             <div class="controls">
-                                <input id="rua" type="text" name="rua" value="<?php echo $result->rua; ?>" />
+                                <input id="rua" type="text" name="rua" value="<?= esc($result->rua) ?>" />
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="numero" class="control-label">Número</label>
                             <div class="controls">
-                                <input id="numero" type="text" name="numero" value="<?php echo $result->numero; ?>" />
+                                <input id="numero" type="text" name="numero" value="<?= esc($result->numero) ?>" />
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="complemento" class="control-label">Complemento</label>
                             <div class="controls">
-                                <input id="complemento" type="text" name="complemento" value="<?php echo $result->complemento; ?>" />
+                                <input id="complemento" type="text" name="complemento" value="<?= esc($result->complemento) ?>" />
                             </div>
                         </div>
                         <div class="control-group" class="control-label">
                             <label for="bairro" class="control-label">Bairro</label>
                             <div class="controls">
-                                <input id="bairro" type="text" name="bairro" value="<?php echo $result->bairro; ?>" />
+                                <input id="bairro" type="text" name="bairro" value="<?= esc($result->bairro) ?>" />
                             </div>
                         </div>
                         <div class="control-group" class="control-label">
                             <label for="cidade" class="control-label">Cidade</label>
                             <div class="controls">
-                                <input id="cidade" type="text" name="cidade" value="<?php echo $result->cidade; ?>" />
+                                <input id="cidade" type="text" name="cidade" value="<?= esc($result->cidade) ?>" />
                             </div>
                         </div>
                         <div class="control-group" class="control-label">
@@ -199,7 +199,7 @@
                         <div class="span6 offset3" style="display:flex;justify-content: center">
                             <button type="submit" class="button btn btn-primary" style="max-width: 160px">
                                 <span class="button__icon"><i class="bx bx-sync"></i></span><span class="button__text2">Atualizar</span></button>
-                            <a title="Voltar" class="button btn btn-warning" href="<?php echo site_url() ?>/clientes"><span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
+                            <a title="Voltar" class="button btn btn-warning" href="<?= site_url() ?>/clientes"><span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
                         </div>
                     </div>
                 </div>
@@ -207,7 +207,7 @@
         </div>
     </div>
 </div>
-<script src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
 <script type="text/javascript">
     $(document).ready(function() {
         let container = document.querySelector('div');
@@ -217,19 +217,19 @@
         icon.addEventListener('click', function() {
             container.classList.toggle('visible');
             if (container.classList.contains('visible')) {
-                icon.src = '<?php echo base_url() ?>assets/img/eye-off.svg';
+                icon.src = '<?= base_url() ?>assets/img/eye-off.svg';
                 input.type = 'text';
             } else {
-                icon.src = '<?php echo base_url() ?>assets/img/eye.svg'
+                icon.src = '<?= base_url() ?>assets/img/eye.svg'
                 input.type = 'password';
             }
         });
 
-        $.getJSON('<?php echo base_url() ?>assets/json/estados.json', function(data) {
+        $.getJSON('<?= base_url() ?>assets/json/estados.json', function(data) {
             for (i in data.estados) {
                 $('#estado').append(new Option(data.estados[i].nome, data.estados[i].sigla));
             }
-            var curState = '<?php echo $result->estado; ?>';
+            var curState = '<?= esc($result->estado) ?>';
             if (curState) {
                 $("#estado option[value=" + curState + "]").prop("selected", true);
             }
diff --git a/application/views/clientes/visualizar.php b/application/views/clientes/visualizar.php
index 8ce9e46d0..da37749a4 100644
--- a/application/views/clientes/visualizar.php
+++ b/application/views/clientes/visualizar.php
@@ -25,25 +25,25 @@
                                 <tr>
                                     <td style="text-align: right; width: 30%"><strong>Nome</strong></td>
                                     <td>
-                                        <?php echo html_escape($result->nomeCliente) ?>
+                                        <?= html_escape($result->nomeCliente) ?>
                                     </td>
                                 </tr>
                                 <tr>
                                     <td style="text-align: right"><strong>Documento</strong></td>
                                     <td>
-                                        <?php echo html_escape($result->documento) ?>
+                                        <?= html_escape($result->documento) ?>
                                     </td>
                                 </tr>
                                 <tr>
                                     <td style="text-align: right"><strong>Data de Cadastro</strong></td>
                                     <td>
-                                        <?php echo html_escape(date('d/m/Y', strtotime($result->dataCadastro))) ?>
+                                        <?= html_escape(date('d/m/Y', strtotime($result->dataCadastro))) ?>
                                     </td>
                                 </tr>
                                 <tr>
                                     <td style="text-align: right"><strong>Tipo do Cliente</strong></td>
                                     <td>
-                                        <?php echo $result->fornecedor == true ? 'Fornecedor' : 'Cliente'; ?>
+                                        <?= $result->fornecedor == true ? 'Fornecedor' : 'Cliente' ?>
                                     </td>
                                 </tr>
                                 </tbody>
@@ -67,25 +67,25 @@
                                 <tr>
                                     <td style="text-align: right; width: 30%"><strong>Contato:</strong></td>
                                     <td>
-                                        <?php echo html_escape($result->contato) ?>
+                                        <?= html_escape($result->contato) ?>
                                     </td>
                                 </tr>
                                 <tr>
                                     <td style="text-align: right; width: 30%"><strong>Telefone</strong></td>
                                     <td>
-                                        <?php echo html_escape($result->telefone) ?>
+                                        <?= html_escape($result->telefone) ?>
                                     </td>
                                 </tr>
                                 <tr>
                                     <td style="text-align: right"><strong>Celular</strong></td>
                                     <td>
-                                        <?php echo html_escape($result->celular) ?>
+                                        <?= html_escape($result->celular) ?>
                                     </td>
                                 </tr>
                                 <tr>
                                     <td style="text-align: right"><strong>Email</strong></td>
                                     <td>
-                                        <?php echo html_escape($result->email) ?>
+                                        <?= html_escape($result->email) ?>
                                     </td>
                                 </tr>
                                 </tbody>
@@ -109,38 +109,38 @@
                                 <tr>
                                     <td style="text-align: right; width: 30%;"><strong>Rua</strong></td>
                                     <td>
-                                        <?php echo $result->rua ?>
+                                        <?= esc($result->rua) ?>
                                     </td>
                                 </tr>
                                 <tr>
                                     <td style="text-align: right"><strong>Número</strong></td>
                                     <td>
-                                        <?php echo $result->numero ?>
+                                        <?= esc($result->numero) ?>
                                     </td>
                                 </tr>
                                 <tr>
                                     <td style="text-align: right"><strong>Complemento</strong></td>
                                     <td>
-                                        <?php echo $result->complemento ?>
+                                        <?= esc($result->complemento) ?>
                                     </td>
                                 </tr>
                                 <tr>
                                     <td style="text-align: right"><strong>Bairro</strong></td>
                                     <td>
-                                        <?php echo $result->bairro ?>
+                                        <?= esc($result->bairro) ?>
                                     </td>
                                 </tr>
                                 <tr>
                                     <td style="text-align: right"><strong>Cidade</strong></td>
                                     <td>
-                                        <?php echo $result->cidade ?> -
-                                        <?php echo $result->estado ?>
+                                        <?= esc($result->cidade) ?> -
+                                        <?= esc($result->estado) ?>
                                     </td>
                                 </tr>
                                 <tr>
                                     <td style="text-align: right"><strong>CEP</strong></td>
                                     <td>
-                                        <?php echo $result->cep ?>
+                                        <?= esc($result->cep) ?>
                                     </td>
                                 </tr>
                                 </tbody>
@@ -282,7 +282,7 @@
             echo '<a title="Icon Title" class="button btn btn-mini btn-info" style="min-width: 140px; top:10px" href="' . base_url() . 'index.php/clientes/editar/' . $result->idClientes . '">
 <span class="button__icon"><i class="bx bx-edit"></i></span> <span class="button__text2"> Editar</span></a>';
         } ?>
-        <a title="Voltar" class="button btn btn-mini btn-warning" style="min-width: 140px; top:10px" href="<?php echo site_url() ?>/clientes">
+        <a title="Voltar" class="button btn btn-mini btn-warning" style="min-width: 140px; top:10px" href="<?= site_url() ?>/clientes">
           <span class="button__icon"><i class="bx bx-undo"></i></span><span class="button__text2">Voltar</span></a>
     </div>
 </div>
diff --git a/application/views/cobrancas/cobrancas.php b/application/views/cobrancas/cobrancas.php
index 4dc70e832..91c1336fb 100644
--- a/application/views/cobrancas/cobrancas.php
+++ b/application/views/cobrancas/cobrancas.php
@@ -77,11 +77,11 @@
             </table>
         </div>
     </div>
-    <?php echo $this->pagination->create_links(); ?>
+    <?= $this->pagination->create_links() ?>
 
     <!-- Modal -->
     <div id="modal-excluir" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-        <form action="<?php echo base_url() ?>index.php/cobrancas/excluir" method="post">
+        <form action="<?= base_url() ?>index.php/cobrancas/excluir" method="post">
             <div class="modal-header">
                 <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
                 <h5 id="myModalLabel">Excluir cobrança</h5>
@@ -98,7 +98,7 @@
     </div>
 
     <div id="modal-confirmar" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-        <form action="<?php echo base_url() ?>index.php/cobrancas/confirmarpagamento" method="post">
+        <form action="<?= base_url() ?>index.php/cobrancas/confirmarpagamento" method="post">
             <div class="modal-header">
                 <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
                 <h5 id="myModalLabel">Confirmar pagamento</h5>
@@ -115,7 +115,7 @@
     </div>
 
     <div id="modal-cancelar" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-        <form action="<?php echo base_url() ?>index.php/cobrancas/cancelar" method="post">
+        <form action="<?= base_url() ?>index.php/cobrancas/cancelar" method="post">
             <div class="modal-header">
                 <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
                 <h5 id="myModalLabel">Cancelar cobrança</h5>
diff --git a/application/views/cobrancas/emails/cobranca.php b/application/views/cobrancas/emails/cobranca.php
index 241313f47..1d8623148 100644
--- a/application/views/cobrancas/emails/cobranca.php
+++ b/application/views/cobrancas/emails/cobranca.php
@@ -113,7 +113,7 @@
                                 <img src="<?= $emitente->url_logo; ?>" style="width:100%; max-width:120px;">
                             </td>
                             <td style="text-align: right">
-                                Cobrança #<?= $cobranca->idCobranca ?><br>
+                                Cobrança #<?= esc($cobranca->idCobranca) ?><br>
                                 Expiração: <?= $cobranca->expire_at ? date('d/m/Y', strtotime($cobranca->expire_at)) : ''; ?>
                             </td>
                         </tr>
@@ -126,10 +126,10 @@
                     <table>
                         <tr>
                             <td>
-                                Cliente: <?= $cobranca->nomeCliente ?><br>
-                                <?= $cobranca->rua ?>, <?= $cobranca->numero ?>, <?= $cobranca->bairro ?><br>
-                                <?= $cobranca->cidade ?> - <?= $cobranca->estado ?> <br>
-                                <?= $cobranca->email ?> <br>
+                                Cliente: <?= esc($cobranca->nomeCliente) ?><br>
+                                <?= esc($cobranca->rua) ?>, <?= esc($cobranca->numero) ?>, <?= esc($cobranca->bairro) ?><br>
+                                <?= esc($cobranca->cidade) ?> - <?= esc($cobranca->estado) ?> <br>
+                                <?= esc($cobranca->email) ?> <br>
                             </td>
 
                             <td style="text-align: right">
@@ -152,7 +152,7 @@
                         PDF
                     </td>
                     <td colspan="3">
-                        <a href="<?= $cobranca->pdf ?>" target="_blank">Abrir em outra aba</a>
+                        <a href="<?= esc($cobranca->pdf) ?>" target="_blank">Abrir em outra aba</a>
                     </td>
                 </tr>
             <?php endif ?>
@@ -163,7 +163,7 @@
                         Link
                     </td>
                     <td colspan="3">
-                        <a href="<?= $cobranca->link ?>" target="_blank">Abrir em outra aba</a>
+                        <a href="<?= esc($cobranca->link) ?>" target="_blank">Abrir em outra aba</a>
                     </td>
                 </tr>
             <?php endif ?>
@@ -174,7 +174,7 @@
                         Código de Barras
                     </td>
                     <td colspan="3">
-                        <?= $cobranca->barcode ?>
+                        <?= esc($cobranca->barcode) ?>
                     </td>
                 </tr>
             <?php endif ?>
diff --git a/application/views/cobrancas/modalGerarPagamento.php b/application/views/cobrancas/modalGerarPagamento.php
index 8ae3fed89..f17136289 100644
--- a/application/views/cobrancas/modalGerarPagamento.php
+++ b/application/views/cobrancas/modalGerarPagamento.php
@@ -3,12 +3,12 @@
 ?>
 
 <script>
-    var paymentGatewaysConfig = JSON.parse("<?php echo addslashes(json_encode($this->config->item('payment_gateways'))); ?>");
+    var paymentGatewaysConfig = <?= esc_json($this->config->item('payment_gateways')) ?>;
 </script>
 
 <div class="modal fade" id="modal-gerar-pagamento" tabindex="-1" role="dialog">
     <div class="modal-dialog" role="document">
-        <form id="form-gerar-cobranca" name="cobranca" method="post" action="<?php echo base_url() . 'index.php/cobrancas/adicionar'; ?>">
+        <form id="form-gerar-cobranca" name="cobranca" method="post" action="<?= base_url() . 'index.php/cobrancas/adicionar' ?>">
             <div class="modal-content">
                 <div class="modal-header">
                     <button type="button" class="close" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
@@ -17,13 +17,13 @@
                 <div class="modal-body">
                     <div id="forma-pag" class="">
                         <div class="form-group">
-                            <input value="<?php echo $id ?>" name="id" hidden>
-                            <input value="<?php echo $tipo ?>" name="tipo" hidden>
+                            <input value="<?= esc($id) ?>" name="id" hidden>
+                            <input value="<?= esc($tipo) ?>" name="tipo" hidden>
                             <label for="gateway_de_pagamento">Gateway de Pagamento: </label>
                             <select id="gateway_de_pagamento" class="form-control span12" name="gateway_de_pagamento" required>
                                 <option value="" selected>Escolha o gateway de pagamento</option>
                                 <?php foreach ($this->config->item('payment_gateways') as $paymentGateway) : ?>
-                                    <option value="<?php echo $paymentGateway['library_name']; ?>"><?php echo $paymentGateway['name']; ?></option>
+                                    <option value="<?= esc($paymentGateway['library_name']) ?>"><?= esc($paymentGateway['name']) ?></option>
                                 <?php endforeach ?>
                             </select>
                             <label id="label_forma_pagamento" for="forma_pagamento" hidden>Forma de Pagamento: </label>
diff --git a/application/views/cobrancas/visualizarCobranca.php b/application/views/cobrancas/visualizarCobranca.php
index 1e42b0fe3..43d0df0cf 100644
--- a/application/views/cobrancas/visualizarCobranca.php
+++ b/application/views/cobrancas/visualizarCobranca.php
@@ -14,63 +14,63 @@
                         <tr>
                             <td style="text-align: right; width: 30%"><strong>Cliente</strong></td>
                             <td>
-                                <?php echo $result->nomeCliente; ?>
+                                <?= esc($result->nomeCliente) ?>
                             </td>
                         </tr>
 
                         <tr>
                             <td style="text-align: right; width: 30%"><strong>Cliente (Documento)</strong></td>
                             <td>
-                                <?php echo $result->documento; ?>
+                                <?= esc($result->documento) ?>
                             </td>
                         </tr>
 
                         <tr>
                             <td style="text-align: right; width: 30%"><strong>Cliente (Telefone)</strong></td>
                             <td>
-                                <?php echo $result->telefone; ?>
+                                <?= esc($result->telefone) ?>
                             </td>
                         </tr>
 
                         <tr>
                             <td style="text-align: right; width: 30%"><strong>Cliente (Celular)</strong></td>
                             <td>
-                                <?php echo $result->celular; ?>
+                                <?= esc($result->celular) ?>
                             </td>
                         </tr>
 
                         <tr>
                             <td style="text-align: right; width: 30%"><strong>Cliente (Email)</strong></td>
                             <td>
-                                <?php echo $result->email; ?>
+                                <?= esc($result->email) ?>
                             </td>
                         </tr>
 
                         <tr>
                             <td style="text-align: right; width: 30%"><strong>Id interno (id)</strong></td>
                             <td>
-                                <?php echo $result->idCobranca; ?>
+                                <?= esc($result->idCobranca) ?>
                             </td>
                         </tr>
 
                         <tr>
                             <td style="text-align: right; width: 30%"><strong>Id externo (charge_id)</strong></td>
                             <td>
-                                <?php echo $result->charge_id; ?>
+                                <?= esc($result->charge_id) ?>
                             </td>
                         </tr>
 
                         <tr>
                             <td style="text-align: right"><strong>Gateway de Pagamento</strong></td>
                             <td>
-                                <?php echo $result->payment_gateway; ?>
+                                <?= esc($result->payment_gateway) ?>
                             </td>
                         </tr>
 
                         <tr>
                             <td style="text-align: right"><strong>Valor da cobrança</strong></td>
                             <td>R$
-                                <?php echo number_format($result->total / 100, 2, ',', '.'); ?>
+                                <?= number_format($result->total / 100, 2, ',', '.') ?>
                             </td>
                         </tr>
 
@@ -90,28 +90,28 @@
                         <tr>
                             <td style="text-align: right"><strong>Expiração</strong></td>
                             <td>
-                                <?php echo date('d/m/Y', strtotime($result->expire_at)); ?>
+                                <?= date('d/m/Y', strtotime($result->expire_at)) ?>
                             </td>
                         </tr>
 
                         <tr>
                             <td style="text-align: right"><strong>Método de pagamento</strong></td>
                             <td>
-                                <?php echo $result->payment_method; ?>
+                                <?= esc($result->payment_method) ?>
                             </td>
                         </tr>
 
                         <tr>
                             <td style="text-align: right"><strong>Url de pagamento</strong></td>
                             <td>
-                                <?php echo $result->payment_url; ?>
+                                <?= esc($result->payment_url) ?>
                             </td>
                         </tr>
 
                         <tr>
                             <td style="text-align: right"><strong>Código de barras</strong></td>
                             <td>
-                                <?php echo $result->barcode; ?>
+                                <?= esc($result->barcode) ?>
                             </td>
                         </tr>
 
@@ -119,7 +119,7 @@
                             <td style="text-align: right"><strong>Link</strong></td>
                             <td>
                                 <?php if ($result->link) { ?>
-                                    <a href="<?php echo $result->link; ?>" target="_blank">Abrir em nova aba</a>
+                                    <a href="<?= esc($result->link) ?>" target="_blank">Abrir em nova aba</a>
                                 <?php } ?>
                             </td>
                         </tr>
@@ -128,7 +128,7 @@
                             <td style="text-align: right"><strong>PDF</strong></td>
                             <td>
                                 <?php if ($result->pdf) { ?>
-                                    <a href="<?php echo $result->pdf; ?>" target="_blank">Abrir em nova aba</a>
+                                    <a href="<?= esc($result->pdf) ?>" target="_blank">Abrir em nova aba</a>
                                 <?php } ?>
                             </td>
                         </tr>
@@ -136,7 +136,7 @@
                         <tr>
                             <td style="text-align: right"><strong>Mensagem</strong></td>
                             <td>
-                                <?php echo $result->message; ?>
+                                <?= esc($result->message) ?>
                             </td>
                         </tr>
                     </tbody>
diff --git a/application/views/conecte/adicionarOs.php b/application/views/conecte/adicionarOs.php
index 884b5a542..b82133595 100644
--- a/application/views/conecte/adicionarOs.php
+++ b/application/views/conecte/adicionarOs.php
@@ -1,10 +1,10 @@
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
 
-<link rel="stylesheet" href="<?php echo base_url() ?>assets/trumbowyg/ui/trumbowyg.css">
-<script type="text/javascript" src="<?php echo base_url() ?>assets/trumbowyg/trumbowyg.js"></script>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/trumbowyg/langs/pt_br.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/trumbowyg/ui/trumbowyg.css">
+<script type="text/javascript" src="<?= base_url() ?>assets/trumbowyg/trumbowyg.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/trumbowyg/langs/pt_br.js"></script>
 
 <style>
     .ui-datepicker {
@@ -34,7 +34,7 @@
                     <div class="tab-content">
                         <div class="tab-pane active" id="tab1">
                             <div class="span12" id="divCadastrarOs">
-                                <form action="<?php echo current_url(); ?>" method="post" id="formOs">
+                                <form action="<?= current_url() ?>" method="post" id="formOs">
                                 <input type="hidden" name="<?= $this->security->get_csrf_token_name(); ?>" value="<?= $this->security->get_csrf_hash(); ?>">
                                     <div class="span12" style="padding: 1%;">
                                         <div class="span12 alert alert-info">
@@ -67,7 +67,7 @@
                                         <div class="span6 offset3" style="display:flex;justify-content: center">
                                             <button class="button btn btn-success" id="btnContinuar">
                                               <span class="button__icon"><i class='bx bx-plus-circle'></i></span><span class="button__text2">Cadastrar</span></button>
-                                            <a href="<?php echo base_url() ?>index.php/mine/os" class="button btn btn-mini btn-warning">
+                                            <a href="<?= base_url() ?>index.php/mine/os" class="button btn btn-mini btn-warning">
                                               <span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
                                         </div>
                                     </div>
diff --git a/application/views/conecte/cadastrar.php b/application/views/conecte/cadastrar.php
index 8541105fa..e8ab2d6fc 100644
--- a/application/views/conecte/cadastrar.php
+++ b/application/views/conecte/cadastrar.php
@@ -2,10 +2,10 @@
 <html lang="pt-br">
 
 <head>
-    <title>Área do Cliente - <?= $this->config->item('app_name') ?></title>
+    <title>Área do Cliente - <?= esc($this->config->item('app_name')) ?></title>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="description" content="<?= $this->config->item('app_name') . ' - ' . $this->config->item('app_subname') ?>">
+    <meta name="description" content="<?= esc($this->config->item('app_name')) . ' - ' . esc($this->config->item('app_subname')) ?>">
     <meta name="csrf-token-name" content="<?= config_item("csrf_token_name") ?>">
     <meta name="csrf-cookie-name" content="<?= config_item("csrf_cookie_name") ?>">
     <link rel="shortcut icon" type="image/png" href="<?= base_url(); ?>assets/img/favicon.png" />
@@ -267,12 +267,12 @@
     <script type="text/javascript" src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
     <script type="text/javascript" src="<?= base_url() ?>assets/js/bootstrap.min.js"></script>
     <script type="text/javascript">
-        <?php if ($this->session->flashdata('error') != null) { ?>
-            console.log('Erro');
+        <?php if ($var = $this->session->flashdata('error')) { ?>
             Swal.fire({
                 position: 'center',
                 icon: 'error',
-                title: '<?= $this->session->flashdata('error') ?>',
+                title: 'Falha!',
+                text: <?= esc_msg($var) ?>,
                 showConfirmButton: false,
                 timer: 4000
             });
@@ -400,7 +400,7 @@
     <div class="row-fluid">
         <div id="footer" class="span12" style="padding: 10px">
             <a class="pecolor" href="https://github.com/RamonSilva20/mapos" target="_blank">
-                <?= date('Y') ?> &copy; Ramon Silva - <?= $this->config->item('app_name') ?> - Versão: <?= $this->config->item('app_version'); ?>
+                <?= date('Y') ?> &copy; Ramon Silva - <?= esc($this->config->item('app_name')) ?> - Versão: <?= esc($this->config->item('app_version')); ?>
             </a>
         </div>
     </div>
diff --git a/application/views/conecte/cobrancas.php b/application/views/conecte/cobrancas.php
index 457992fc1..01fb7c0a1 100644
--- a/application/views/conecte/cobrancas.php
+++ b/application/views/conecte/cobrancas.php
@@ -65,11 +65,11 @@
         </div>
     </div>
 </div>
-<?php echo $this->pagination->create_links(); ?>
+<?= $this->pagination->create_links() ?>
 
 <!-- Modal -->
 <div id="modal-excluir" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form action="<?php echo base_url() ?>index.php/cobrancas/excluir" method="post">
+    <form action="<?= base_url() ?>index.php/cobrancas/excluir" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h5 id="myModalLabel">Excluir cobrança</h5>
@@ -87,7 +87,7 @@
 
 
 <div id="modal-confirmar" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form action="<?php echo base_url() ?>index.php/cobrancas/confirmarpagamento" method="post">
+    <form action="<?= base_url() ?>index.php/cobrancas/confirmarpagamento" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h5 id="myModalLabel">Confirmar pagamento</h5>
@@ -105,7 +105,7 @@
 
 
 <div id="modal-cancelar" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form action="<?php echo base_url() ?>index.php/cobrancas/cancelar" method="post">
+    <form action="<?= base_url() ?>index.php/cobrancas/cancelar" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h5 id="myModalLabel">Cancelar cobrança</h5>
diff --git a/application/views/conecte/conta.php b/application/views/conecte/conta.php
index e28b0efeb..bf94eb07f 100644
--- a/application/views/conecte/conta.php
+++ b/application/views/conecte/conta.php
@@ -4,7 +4,7 @@
             <li class="active"><a data-toggle="tab" href="#tab1">Meus Dados</a></li>
 
             <div>
-                <a title="Editar" class="button btn btn-success" style="max-width: 140px;margin: 5px" href="<?php echo base_url() ?>index.php/mine/editarDados/<?php echo $result->idClientes ?>">
+                <a title="Editar" class="button btn btn-success" style="max-width: 140px;margin: 5px" href="<?= base_url() ?>index.php/mine/editarDados/<?= esc($result->idClientes) ?>">
                   <span class="button__icon"><i class="bx bx-edit"></i> </span> <span class="button__text2">Editar</span></a>
             </div>
         </ul>
@@ -29,25 +29,25 @@
                                     <tr>
                                         <td style="text-align: right; width: 30%"><strong>Nome</strong></td>
                                         <td>
-                                            <?php echo $result->nomeCliente ?>
+                                            <?= esc($result->nomeCliente) ?>
                                         </td>
                                     </tr>
                                     <tr>
                                         <td style="text-align: right; width: 30%"><strong>Contato</strong></td>
                                         <td>
-                                            <?php echo $result->contato ?>
+                                            <?= esc($result->contato) ?>
                                         </td>
                                     </tr>
                                     <tr>
                                         <td style="text-align: right"><strong>Documento</strong></td>
                                         <td>
-                                            <?php echo $result->documento ?>
+                                            <?= esc($result->documento) ?>
                                         </td>
                                     </tr>
                                     <tr>
                                         <td style="text-align: right"><strong>Data de Cadastro</strong></td>
                                         <td>
-                                            <?php echo date('d/m/Y', strtotime($result->dataCadastro)) ?>
+                                            <?= date('d/m/Y', strtotime($result->dataCadastro)) ?>
                                         </td>
                                     </tr>
                                 </tbody>
@@ -71,19 +71,19 @@
                                     <tr>
                                         <td style="text-align: right; width: 30%"><strong>Telefone</strong></td>
                                         <td>
-                                            <?php echo $result->telefone ?>
+                                            <?= esc($result->telefone) ?>
                                         </td>
                                     </tr>
                                     <tr>
                                         <td style="text-align: right"><strong>Celular</strong></td>
                                         <td>
-                                            <?php echo $result->celular ?>
+                                            <?= esc($result->celular) ?>
                                         </td>
                                     </tr>
                                     <tr>
                                         <td style="text-align: right"><strong>Email</strong></td>
                                         <td>
-                                            <?php echo $result->email ?>
+                                            <?= esc($result->email) ?>
                                         </td>
                                     </tr>
                                 </tbody>
@@ -107,38 +107,38 @@
                                     <tr>
                                         <td style="text-align: right; width: 30%"><strong>Rua</strong></td>
                                         <td>
-                                            <?php echo $result->rua ?>
+                                            <?= esc($result->rua) ?>
                                         </td>
                                     </tr>
                                     <tr>
                                         <td style="text-align: right"><strong>Número</strong></td>
                                         <td>
-                                            <?php echo $result->numero ?>
+                                            <?= esc($result->numero) ?>
                                         </td>
                                     </tr>
                                     <tr>
                                         <td style="text-align: right"><strong>Complemento</strong></td>
                                         <td>
-                                            <?php echo $result->complemento ?>
+                                            <?= esc($result->complemento) ?>
                                         </td>
                                     </tr>
                                     <tr>
                                         <td style="text-align: right"><strong>Bairro</strong></td>
                                         <td>
-                                            <?php echo $result->bairro ?>
+                                            <?= esc($result->bairro) ?>
                                         </td>
                                     </tr>
                                     <tr>
                                         <td style="text-align: right"><strong>Cidade</strong></td>
                                         <td>
-                                            <?php echo $result->cidade ?> -
-                                            <?php echo $result->estado ?>
+                                            <?= esc($result->cidade) ?> -
+                                            <?= esc($result->estado) ?>
                                         </td>
                                     </tr>
                                     <tr>
                                         <td style="text-align: right"><strong>CEP</strong></td>
                                         <td>
-                                            <?php echo $result->cep ?>
+                                            <?= esc($result->cep) ?>
                                         </td>
                                     </tr>
                                 </tbody>
diff --git a/application/views/conecte/detalhes_os.php b/application/views/conecte/detalhes_os.php
index 7e9fe9d99..4e3fb8ab9 100644
--- a/application/views/conecte/detalhes_os.php
+++ b/application/views/conecte/detalhes_os.php
@@ -1,6 +1,6 @@
-<link rel="stylesheet" href="<?php echo base_url() ?>assets/trumbowyg/ui/trumbowyg.css">
-<script type="text/javascript" src="<?php echo base_url() ?>assets/trumbowyg/trumbowyg.js"></script>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/trumbowyg/langs/pt_br.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/trumbowyg/ui/trumbowyg.css">
+<script type="text/javascript" src="<?= base_url() ?>assets/trumbowyg/trumbowyg.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/trumbowyg/langs/pt_br.js"></script>
 
 <style>
     .ui-datepicker {
@@ -43,56 +43,56 @@
 
                                     <div class="span6" style="margin-left: 0">
                                         <h3>#Protocolo:
-                                            <?php echo $result->idOs ?>
+                                            <?= esc($result->idOs) ?>
                                         </h3>
                                         <input id="valorTotal" type="hidden" name="valorTotal" value="" />
                                     </div>
                                     <div class="span6">
                                         <label for="tecnico">Técnico / Responsável</label>
-                                        <input disabled="disabled" id="tecnico" class="span12" type="text" name="tecnico" value="<?php echo $result->nome ?>" />
+                                        <input disabled="disabled" id="tecnico" class="span12" type="text" name="tecnico" value="<?= esc($result->nome) ?>" />
 
                                     </div>
                                 </div>
                                 <div class="span12" style="padding: 1%; margin-left: 0">
                                     <div class="span3">
                                         <label for="status">Status<span class="required"></span></label>
-                                        <input disabled="disabled" type="text" name="status" id="status" value="<?php echo $result->status; ?>">
+                                        <input disabled="disabled" type="text" name="status" id="status" value="<?= esc($result->status) ?>">
 
                                     </div>
                                     <div class="span3">
                                         <label for="dataInicial">Data Inicial<span class="required">*</span></label>
-                                        <input id="dataInicial" disabled="disabled" class="span12 datepicker" type="text" name="dataInicial" value="<?php echo date('d/m/Y', strtotime($result->dataInicial)); ?>" />
+                                        <input id="dataInicial" disabled="disabled" class="span12 datepicker" type="text" name="dataInicial" value="<?= date('d/m/Y', strtotime($result->dataInicial)) ?>" />
                                     </div>
                                     <div class="span3">
                                         <label for="dataFinal">Data Final</label>
-                                        <input id="dataFinal" disabled="disabled" class="span12 datepicker" type="text" name="dataFinal" value="<?php echo date('d/m/Y', strtotime($result->dataFinal)); ?>" />
+                                        <input id="dataFinal" disabled="disabled" class="span12 datepicker" type="text" name="dataFinal" value="<?= date('d/m/Y', strtotime($result->dataFinal)) ?>" />
                                     </div>
 
                                     <div class="span3">
                                         <label for="garantia">Garantia</label>
-                                        <input id="garantia" disabled="disabled" type="text" class="span12" name="garantia" value="<?php echo $result->garantia ?>" />
+                                        <input id="garantia" disabled="disabled" type="text" class="span12" name="garantia" value="<?= esc($result->garantia) ?>" />
                                     </div>
                                 </div>
 
 
                                 <div class="span12" style="padding: 1%; margin-left: 0">
                                     <label for="descricaoProduto">Descrição Produto/Serviço</label>
-                                    <textarea class="span12 editor" name="descricaoProduto" id="descricaoProduto" cols="30" rows="5" disabled><?php echo $result->descricaoProduto; ?></textarea>
+                                    <textarea class="span12 editor" name="descricaoProduto" id="descricaoProduto" cols="30" rows="5" disabled><?= esc($result->descricaoProduto) ?></textarea>
                                 </div>
 
                                 <div class="span12" style="padding: 1%; margin-left: 0">
                                     <label for="defeito">Defeito</label>
-                                    <textarea class="span12 editor" name="defeito" id="defeito" cols="30" rows="5" disabled><?php echo $result->defeito; ?></textarea>
+                                    <textarea class="span12 editor" name="defeito" id="defeito" cols="30" rows="5" disabled><?= esc($result->defeito) ?></textarea>
                                 </div>
 
                                 <div class="span12" style="padding: 1%; margin-left: 0">
                                     <label for="observacoes">Observações</label>
-                                    <textarea class="span12 editor" name="observacoes" id="observacoes" cols="30" rows="5" disabled><?php echo $result->observacoes; ?></textarea>
+                                    <textarea class="span12 editor" name="observacoes" id="observacoes" cols="30" rows="5" disabled><?= esc($result->observacoes) ?></textarea>
                                 </div>
 
                                 <div class="span12" style="padding: 1%; margin-left: 0">
                                     <label for="laudoTecnico">Laudo Técnico</label>
-                                    <textarea class="span12 editor" name="laudoTecnico" id="laudoTecnico" cols="30" rows="5" disabled><?php echo $result->laudoTecnico; ?></textarea>
+                                    <textarea class="span12 editor" name="laudoTecnico" id="laudoTecnico" cols="30" rows="5" disabled><?= esc($result->laudoTecnico) ?></textarea>
                                 </div>
 
                             </div>
@@ -129,7 +129,7 @@
                                         <tr>
                                             <td colspan="3" style="text-align: right"><strong>Total:</strong></td>
                                             <td><strong>R$
-                                                    <?php echo number_format($total, 2, ',', '.'); ?><input type="hidden" id="total-venda" value="<?php echo number_format($total, 2); ?>"></strong></td>
+                                                    <?= number_format($total, 2, ',', '.') ?><input type="hidden" id="total-venda" value="<?= number_format($total, 2) ?>"></strong></td>
                                         </tr>
                                     </tbody>
                                 </table>
@@ -167,7 +167,7 @@
                                             <tr>
                                                 <td colspan="3" style="text-align: right"><strong>Total:</strong></td>
                                                 <td><strong>R$
-                                                        <?php echo number_format($total, 2, ',', '.'); ?><input type="hidden" id="total-servico" value="<?php echo number_format($total, 2); ?>"></strong></td>
+                                                        <?= number_format($total, 2, ',', '.') ?><input type="hidden" id="total-servico" value="<?= number_format($total, 2) ?>"></strong></td>
                                             </tr>
                                         </tbody>
                                     </table>
@@ -186,7 +186,7 @@
                                         <form id="formAnexos" enctype="multipart/form-data" action="javascript:;" accept-charset="utf-8" s method="post">
                                             <div class="span10">
 
-                                                <input type="hidden" name="idOsServico" id="idOsServico" value="<?php echo $result->idOs ?>" />
+                                                <input type="hidden" name="idOsServico" id="idOsServico" value="<?= esc($result->idOs) ?>" />
                                                 <label for="">Anexo</label>
                                                 <input type="file" class="span12" name="userfile[]" multiple="multiple" size="20" />
                                             </div>
@@ -264,7 +264,7 @@
 
 <!-- Modal Faturar-->
 <div id="modal-faturar" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form id="formFaturar" action="<?php echo current_url() ?>" method="post">
+    <form id="formFaturar" action="<?= current_url() ?>" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h3 id="myModalLabel">Faturar Venda</h3>
@@ -274,15 +274,15 @@
             <div class="span12 alert alert-info" style="margin-left: 0"> Obrigatório o preenchimento dos campos com asterisco.</div>
             <div class="span12" style="margin-left: 0">
                 <label for="descricao">Descrição*</label>
-                <input class="span12" id="descricao" type="text" name="descricao" value="Fatura de Venda - #<?php echo $result->idOs; ?> " />
+                <input class="span12" id="descricao" type="text" name="descricao" value="Fatura de Venda - #<?= esc($result->idOs) ?> " />
 
             </div>
             <div class="span12" style="margin-left: 0">
                 <div class="span12" style="margin-left: 0">
                     <label for="cliente">Cliente*</label>
-                    <input class="span12" id="cliente" type="text" name="cliente" value="<?php echo $result->nomeCliente ?>" />
-                    <input type="hidden" name="clientes_id" id="clientes_id" value="<?php echo $result->clientes_id ?>">
-                    <input type="hidden" name="os_id" id="os_id" value="<?php echo $result->idOs; ?>">
+                    <input class="span12" id="cliente" type="text" name="cliente" value="<?= esc($result->nomeCliente) ?>" />
+                    <input type="hidden" name="clientes_id" id="clientes_id" value="<?= esc($result->clientes_id) ?>">
+                    <input type="hidden" name="os_id" id="os_id" value="<?= esc($result->idOs) ?>">
                 </div>
 
 
@@ -291,7 +291,7 @@
                 <div class="span4" style="margin-left: 0">
                     <label for="valor">Valor*</label>
                     <input type="hidden" id="tipo" name="tipo" value="receita" />
-                    <input class="span12 money" id="valor" type="text" name="valor" value="<?php echo number_format($total, 2, '.', ''); ?> " />
+                    <input class="span12 money" id="valor" type="text" name="valor" value="<?= number_format($total, 2, '.', '') ?> " />
                 </div>
                 <div class="span4">
                     <label for="vencimento">Data Vencimento*</label>
@@ -348,6 +348,6 @@
         var link = $(this).attr('link');
         var id = $(this).attr('imagem');
         $("#div-visualizar-anexo").html('<img src="' + link + '" alt="">');
-        $("#download").attr('href', "<?php echo base_url(); ?>index.php/mine/downloadanexo/" + id);
+        $("#download").attr('href', "<?= base_url() ?>index.php/mine/downloadanexo/" + id);
     });
 </script>
diff --git a/application/views/conecte/editar_dados.php b/application/views/conecte/editar_dados.php
index 5103d4198..9709866dc 100644
--- a/application/views/conecte/editar_dados.php
+++ b/application/views/conecte/editar_dados.php
@@ -1,6 +1,6 @@
-<script src="<?php echo base_url() ?>assets/js/jquery.mask.min.js"></script>
-<script src="<?php echo base_url() ?>assets/js/sweetalert2.all.min.js"></script>
-<script src="<?php echo base_url() ?>assets/js/funcoes.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.mask.min.js"></script>
+<script src="<?= base_url() ?>assets/js/sweetalert2.all.min.js"></script>
+<script src="<?= base_url() ?>assets/js/funcoes.js"></script>
 
 <div class="row-fluid" style="margin-top:0">
     <div class="span12">
@@ -13,20 +13,20 @@
             </div>
             <div class="widget-content nopadding tab-content">
 
-                <form action="<?php echo current_url(); ?>" id="formCliente" method="post" class="form-horizontal">
+                <form action="<?= current_url() ?>" id="formCliente" method="post" class="form-horizontal">
                 <input type="hidden" name="<?= $this->security->get_csrf_token_name(); ?>" value="<?= $this->security->get_csrf_hash(); ?>">
                     <div class="control-group">
-                        <input type="hidden" name="idClientes" id="idClientes" value="<?php echo $result->idClientes; ?>" />
+                        <input type="hidden" name="idClientes" id="idClientes" value="<?= esc($result->idClientes) ?>" />
                         <label for="nomeCliente" class="control-label">Nome<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="nomeCliente" type="text" name="nomeCliente" value="<?php echo $result->nomeCliente; ?>" />
+                            <input id="nomeCliente" type="text" name="nomeCliente" value="<?= esc($result->nomeCliente) ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="contato" class="control-label">Contato</label>
                         <div class="controls">
-                            <input id="contato" type="text" name="contato" value="<?php echo $result->contato; ?>" />
+                            <input id="contato" type="text" name="contato" value="<?= esc($result->contato) ?>" />
                         </div>
                     </div>
 
@@ -36,28 +36,28 @@
                         } ?>
                         <label for="documento" class="control-label">CPF/CNPJ<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="documento" class="cpfcnpjmine" type="text" name="documento" value="<?php echo $result->documento; ?>" />
+                            <input id="documento" class="cpfcnpjmine" type="text" name="documento" value="<?= esc($result->documento) ?>" />
                             <button id="buscar_info_cnpj" class="btn btn-xs" type="button"><i class="fas fa-search"></i></button>
                         </div>
                     </div>
                     <div class="control-group">
                         <label for="telefone" class="control-label">Telefone<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="telefone" type="text" name="telefone" value="<?php echo $result->telefone; ?>" />
+                            <input id="telefone" type="text" name="telefone" value="<?= esc($result->telefone) ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="celular" class="control-label">Celular</label>
                         <div class="controls">
-                            <input id="celular" type="text" name="celular" value="<?php echo $result->celular; ?>" />
+                            <input id="celular" type="text" name="celular" value="<?= esc($result->celular) ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="email" class="control-label">Email<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="email" type="text" name="email" value="<?php echo $result->email; ?>" />
+                            <input id="email" type="text" name="email" value="<?= esc($result->email) ?>" />
                         </div>
                     </div>
 
@@ -65,54 +65,54 @@
                         <label for="senha" class="control-label">Senha</label>
                         <div class="controls">
                             <input id="senha" type="password" name="senha" value="" placeholder="Não preencha se não quiser alterar." />
-                            <img id="imgSenha" src="<?php echo base_url() ?>assets/img/eye.svg" alt="" style="width: 18px; cursor: pointer;">
+                            <img id="imgSenha" src="<?= base_url() ?>assets/img/eye.svg" alt="" style="width: 18px; cursor: pointer;">
                         </div>
                     </div>
 
                     <div class="control-group" class="control-label">
                         <label for="cep" class="control-label">CEP<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="cep" type="text" name="cep" value="<?php echo $result->cep; ?>" />
+                            <input id="cep" type="text" name="cep" value="<?= esc($result->cep) ?>" />
                         </div>
                     </div>
 
                     <div class="control-group" class="control-label">
                         <label for="rua" class="control-label">Rua<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="rua" type="text" name="rua" value="<?php echo $result->rua; ?>" />
+                            <input id="rua" type="text" name="rua" value="<?= esc($result->rua) ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="numero" class="control-label">Número<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="numero" type="text" name="numero" value="<?php echo $result->numero; ?>" />
+                            <input id="numero" type="text" name="numero" value="<?= esc($result->numero) ?>" />
                         </div>
                     </div>
                     <div class="control-group">
                         <label for="complemento" class="control-label">Complmento</label>
                         <div class="controls">
-                            <input id="complemento" type="text" name="complemento" value="<?php echo $result->complemento; ?>" />
+                            <input id="complemento" type="text" name="complemento" value="<?= esc($result->complemento) ?>" />
                         </div>
                     </div>
                     <div class="control-group" class="control-label">
                         <label for="bairro" class="control-label">Bairro<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="bairro" type="text" name="bairro" value="<?php echo $result->bairro; ?>" />
+                            <input id="bairro" type="text" name="bairro" value="<?= esc($result->bairro) ?>" />
                         </div>
                     </div>
 
                     <div class="control-group" class="control-label">
                         <label for="cidade" class="control-label">Cidade<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="cidade" type="text" name="cidade" value="<?php echo $result->cidade; ?>" />
+                            <input id="cidade" type="text" name="cidade" value="<?= esc($result->cidade) ?>" />
                         </div>
                     </div>
 
                     <div class="control-group" class="control-label">
                         <label for="estado" class="control-label">Estado<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="estado" type="text" name="estado" value="<?php echo $result->estado; ?>" />
+                            <input id="estado" type="text" name="estado" value="<?= esc($result->estado) ?>" />
                         </div>
                     </div>
 
@@ -122,7 +122,7 @@
                             <div class="span6 offset3" style="display:flex;justify-content: center">
                                 <button type="submit" class="button btn btn-primary">
                                     <span class="button__icon"><i class="bx bx-sync"></i></span><span class="button__text2">Atualizar</span></button>
-                                <a href="<?php echo base_url() ?>index.php/mine/conta" id="" class="button btn btn-mini btn-warning">
+                                <a href="<?= base_url() ?>index.php/mine/conta" id="" class="button btn btn-mini btn-warning">
                                     <span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
                             </div>
                         </div>
@@ -135,7 +135,7 @@
 
 
 
-<script src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
 <script type="text/javascript">
     $(document).ready(function() {
         let container = document.querySelector('div');
@@ -145,10 +145,10 @@
         icon.addEventListener('click', function() {
             container.classList.toggle('visible');
             if (container.classList.contains('visible')) {
-                icon.src = '<?php echo base_url() ?>assets/img/eye-off.svg';
+                icon.src = '<?= base_url() ?>assets/img/eye-off.svg';
                 input.type = 'text';
             } else {
-                icon.src = '<?php echo base_url() ?>assets/img/eye.svg'
+                icon.src = '<?= base_url() ?>assets/img/eye.svg'
                 input.type = 'password';
             }
         });
diff --git a/application/views/conecte/emails/clientenovasenha.php b/application/views/conecte/emails/clientenovasenha.php
index 0aa715a39..fc5168b2a 100644
--- a/application/views/conecte/emails/clientenovasenha.php
+++ b/application/views/conecte/emails/clientenovasenha.php
@@ -113,7 +113,7 @@
                     <table>
                         <tr>
                             <td class="title">
-                                <img src="<?= $emitente ? $emitente->url_logo : "" ?>" style="width:100%; max-width:120px;">
+                                <img src="<?= ($emitente ? esc($emitente->url_logo) : "") ?>" style="width:100%; max-width:120px;">
                             </td>
                             <td style="text-align: right">
                                 <br>
@@ -130,7 +130,7 @@
                     <table>
                         <tr>
                             <td>
-                                Cliente: <?= $cliente->nomeCliente ?><br>
+                                Cliente: <?= esc($cliente->nomeCliente) ?><br>
                             </td>
 
                             <td style="text-align: right">
@@ -145,7 +145,7 @@
             <tr class="details">
 
                 <td colspan="4" style="text-align: left">
-                    Caro(a) <b><?= $cliente->nomeCliente ?></b>,
+                    Caro(a) <b><?= esc($cliente->nomeCliente) ?></b>,
                     <br>
 
                 </td>
@@ -159,8 +159,8 @@
             </tr>
             <tr class="details">
                 <td colspan="4" style="text-align: left">
-                    Caso não funcione o link, por favor acessar <?= base_url() . "index.php/mine/tokenManual"?> <br><br>
-                    Ao carregar a página você devera copiar e colar <strong><?= $resets_de_senha->token ?></strong>
+                    Caso não funcione o link, por favor acessar <?= base_url() . "index.php/mine/tokenManual" ?> <br><br>
+                    Ao carregar a página você devera copiar e colar <strong><?= esc($resets_de_senha->token) ?></strong>
                 </td>
             </tr>
             <tr class="details">
diff --git a/application/views/conecte/imprimirOs.php b/application/views/conecte/imprimirOs.php
index 39d405f4a..cd4b1bbae 100644
--- a/application/views/conecte/imprimirOs.php
+++ b/application/views/conecte/imprimirOs.php
@@ -6,7 +6,7 @@
 <html lang="pt-br">
 
 <head>
-    <title><?= $this->config->item('app_name') ?> - <?= $result->idOs ?> - <?= $result->nomeCliente ?></title>
+    <title><?= esc($this->config->item('app_name')) ?> - <?= esc($result->idOs) ?> - <?= esc($result->nomeCliente) ?></title>
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap5.3.2.min.css" />
     <link rel="stylesheet" href="<?= base_url() ?>assets/font-awesome/css/font-awesome.css" />
@@ -18,26 +18,26 @@
             <header>
                 <?php if ($emitente == null) : ?>
                     <div class="alert alert-danger" role="alert">
-                        Você precisa configurar os dados do emitente. >>> <a href="<?=base_url()?>index.php/mapos/emitente">Configurar</a>
+                        Você precisa configurar os dados do emitente. >>> <a href="<?= base_url() ?>index.php/mapos/emitente">Configurar</a>
                     </div>
                 <?php else : ?>
                     <div class="imgLogo" class="align-middle">
-                        <img src="<?= $emitente->url_logo ?>" class="img-fluid" style="width:140px;">
+                        <img src="<?= esc($emitente->url_logo) ?>" class="img-fluid" style="width:140px;">
                     </div>
                     <div class="emitente">
-                        <span style="font-size: 16px;"><b><?= $emitente->nome ?></b></span></br>
+                        <span style="font-size: 16px;"><b><?= esc($emitente->nome) ?></b></span></br>
                         <?php if ($emitente->cnpj != "00.000.000/0000-00") : ?>
-                            <span class="align-middle">CNPJ: <?= $emitente->cnpj ?></span></br>
+                            <span class="align-middle">CNPJ: <?= esc($emitente->cnpj) ?></span></br>
                         <?php endif; ?>
                         <span class="align-middle">
-                            <?= $emitente->rua.', '.$emitente->numero.', '.$emitente->bairro ?><br>
-                            <?= $emitente->cidade.' - '.$emitente->uf.' - '.$emitente->cep ?>
+                            <?= esc($emitente->rua) . ', ' . esc($emitente->numero) . ', ' . esc($emitente->bairro) ?><br>
+                            <?= esc($emitente->cidade) . ' - ' . esc($emitente->uf) . ' - ' . esc($emitente->cep) ?>
                         </span>
                     </div>
                     <div class="contatoEmitente">
-                        <span style="font-weight: bold;">Tel: <?= $emitente->telefone ?></span></br>
-                        <span style="font-weight: bold;"><?= $emitente->email ?></span></br>
-                        <span style="word-break: break-word;">Responsável: <b><?= $result->nome ?></b></span>
+                        <span style="font-weight: bold;">Tel: <?= esc($emitente->telefone) ?></span></br>
+                        <span style="font-weight: bold;"><?= esc($emitente->email) ?></span></br>
+                        <span style="word-break: break-word;">Responsável: <b><?= esc($result->nome) ?></b></span>
                     </div>
                 <?php endif; ?>
             </header>
@@ -66,11 +66,11 @@
                             </thead>
                             <tbody>
                                 <tr>
-                                    <td class="text-center"><?= $result->status ?></td>
+                                    <td class="text-center"><?= esc($result->status) ?></td>
                                     <td class="text-center"><?= date('d/m/Y', strtotime($result->dataInicial)) ?></td>
                                     <td class="text-center"><?= $result->dataFinal ? date('d/m/Y', strtotime($result->dataFinal)) : '' ?></td>
                                     <?php if ($result->garantia) : ?>
-                                        <td class="text-center"><?= $result->garantia . ' dia(s)' ?></td>
+                                        <td class="text-center"><?= esc($result->garantia) . ' dia(s)' ?></td>
                                     <?php endif; ?>
                                     <?php if (in_array($result->status, ['Finalizado', 'Faturado'])) : ?>
                                         <td class="text-center"><?= dateInterval($result->dataFinal, $result->garantia) ?></td>
@@ -84,15 +84,15 @@
                 <div class="subtitle">DADOS DO CLIENTE</div>
                 <div class="dados">
                     <div>
-                        <span><b><?= $result->nomeCliente ?></b></span><br />
-                        <span>CPF/CNPJ: <?= $result->documento ?></span><br />
-                        <span><?= $result->contato_cliente.' '.$result->telefone ?><?= $result->telefone && $result->celular ? ' / '.$result->celular : $result->celular ?></span><br />
-                        <span><?= $result->email ?></span><br />
+                        <span><b><?= esc($result->nomeCliente) ?></b></span><br />
+                        <span>CPF/CNPJ: <?= esc($result->documento) ?></span><br />
+                        <span><?= esc($result->contato_cliente) . ' ' . esc($result->telefone) ?><?= ($result->telefone && $result->celular ? ' / ' . esc($result->celular) : esc($result->celular)) ?></span><br />
+                        <span><?= esc($result->email) ?></span><br />
                     </div>
                     <div style="text-align: right;">
-                        <span><?= $result->rua.', '.$result->numero.', '.$result->bairro ?></span><br />
-                        <span><?= $result->complemento.' - '.$result->cidade.' - '.$result->estado ?></span><br />
-                        <span>CEP: <?= $result->cep ?></span><br />
+                        <span><?= esc($result->rua) . ', ' . esc($result->numero) . ', ' . esc($result->bairro) ?></span><br />
+                        <span><?= esc($result->complemento) . ' - ' . esc($result->cidade) . ' - ' . esc($result->estado) ?></span><br />
+                        <span>CEP: <?= esc($result->cep) ?></span><br />
                     </div>
                 </div>
 
@@ -200,10 +200,10 @@
                     <div class="pagamento">
                         <div class="qrcode">
                             <?php if ($chaveFormatada) : ?>
-                                <div><img width="130px" src="<?= $qrCode ?>" alt="QR Code de Pagamento" /></div>
+                                <div><img width="130px" src="<?= esc($qrCode) ?>" alt="QR Code de Pagamento" /></div>
                                 <div style="display: flex; flex-wrap: wrap; align-content: center;">
                                     <div style="width: 100%; text-align:center;"><i class="fas fa-camera"></i><br />Escaneie o QRCode ao lado para pagar por Pix</div>
-                                    <div class="chavePix">Chave Pix: <b><?= $chaveFormatada ?></b></div>
+                                    <div class="chavePix">Chave Pix: <b><?= esc($chaveFormatada) ?></b></div>
                                 </div>
                             <?php else: ?>
                                 <div></div>
diff --git a/application/views/conecte/imprimirVenda.php b/application/views/conecte/imprimirVenda.php
index 2923d1cec..b772a98d9 100644
--- a/application/views/conecte/imprimirVenda.php
+++ b/application/views/conecte/imprimirVenda.php
@@ -5,7 +5,7 @@
 <html lang="pt-br">
 
 <head>
-    <title><?= $this->config->item('app_name') ?> - Venda Nº#<?= $result->idVendas ?> - <?= $result->nomeCliente ?></title>
+    <title><?= esc($this->config->item('app_name')) ?> - Venda Nº#<?= esc($result->idVendas) ?> - <?= esc($result->nomeCliente) ?></title>
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap5.3.2.min.css" />
     <link rel="stylesheet" href="<?= base_url() ?>assets/font-awesome/css/font-awesome.css" />
@@ -17,26 +17,26 @@
             <header>
                 <?php if ($emitente == null) : ?>
                     <div class="alert alert-danger" role="alert">
-                        Você precisa configurar os dados do emitente. >>> <a href="<?=base_url()?>index.php/mapos/emitente">Configurar</a>
+                        Você precisa configurar os dados do emitente. >>> <a href="<?= base_url() ?>index.php/mapos/emitente">Configurar</a>
                     </div>
                 <?php else : ?>
                     <div class="imgLogo" class="align-middle">
-                        <img src="<?= $emitente->url_logo ?>" class="img-fluid" style="width:140px;">
+                        <img src="<?= esc($emitente->url_logo) ?>" class="img-fluid" style="width:140px;">
                     </div>
                     <div class="emitente">
-                        <span style="font-size: 16px;"><b><?= $emitente->nome ?></b></span><br>
+                        <span style="font-size: 16px;"><b><?= esc($emitente->nome) ?></b></span><br>
                         <?php if ($emitente->cnpj != "00.000.000/0000-00") : ?>
-                            <span class="align-middle">CNPJ: <?= $emitente->cnpj ?></span><br>
+                            <span class="align-middle">CNPJ: <?= esc($emitente->cnpj) ?></span><br>
                         <?php endif; ?>
                         <span class="align-middle">
-                            <?= $emitente->rua.', '.$emitente->numero.', '.$emitente->bairro ?><br>
-                            <?= $emitente->cidade.' - '.$emitente->uf.' - '.$emitente->cep ?>
+                            <?= esc($emitente->rua) . ', ' . esc($emitente->numero) . ', ' . esc($emitente->bairro) ?><br>
+                            <?= esc($emitente->cidade) . ' - ' . esc($emitente->uf) . ' - ' . esc($emitente->cep) ?>
                         </span>
                     </div>
                     <div class="contatoEmitente">
-                        <span style="font-weight: bold;">Tel: <?= $emitente->telefone ?></span><br>
-                        <span style="font-weight: bold;"><?= $emitente->email ?></span><br>
-                        <span style="word-break: break-word;">Vendedor: <b><?= $result->nome ?></b></span>
+                        <span style="font-weight: bold;">Tel: <?= esc($emitente->telefone) ?></span><br>
+                        <span style="font-weight: bold;"><?= esc($emitente->email) ?></span><br>
+                        <span style="word-break: break-word;">Vendedor: <b><?= esc($result->nome) ?></b></span>
                     </div>
                 <?php endif; ?>
             </header>
@@ -59,11 +59,11 @@
                             </thead>
                             <tbody>
                                 <tr>
-                                    <td class="text-center"><?= $result->status ?></td>
+                                    <td class="text-center"><?= esc($result->status) ?></td>
                                     <td class="text-center"><?= date('d/m/Y', strtotime($result->dataVenda)) ?></td>
                                     <td class="text-center">
                                         <?php if ($result->garantia > 0): ?>
-                                            <?= $result->garantia . ' dia(s)' ?>
+                                            <?= esc($result->garantia) . ' dia(s)' ?>
                                         <?php else: ?>
                                             Sem garantia
                                         <?php endif; ?>
@@ -88,15 +88,15 @@
                 <div class="subtitle">DADOS DO CLIENTE</div>
                 <div class="dados">
                     <div>
-                        <span><b><?= $result->nomeCliente ?></b></span><br />
-                        <span>CPF/CNPJ: <?= $result->documento ?></span><br />
-                        <span><?= $result->contato.' '.$result->telefone ?><?= $result->telefone && $result->celular ? ' / '.$result->celular : $result->celular ?></span><br />
-                        <span><?= $result->emailCliente ?></span><br />
+                        <span><b><?= esc($result->nomeCliente) ?></b></span><br />
+                        <span>CPF/CNPJ: <?= esc($result->documento) ?></span><br />
+                        <span><?= esc($result->contato) . ' ' . esc($result->telefone) ?><?= ($result->telefone && $result->celular ? ' / ' . esc($result->celular) : esc($result->celular)) ?></span><br />
+                        <span><?= esc($result->emailCliente) ?></span><br />
                     </div>
                     <div style="text-align: right;">
-                        <span><?= $result->rua.', '.$result->numero.', '.$result->bairro ?></span><br />
-                        <span><?= $result->complemento.' - '.$result->cidade.' - '.$result->estado ?></span><br />
-                        <span>CEP: <?= $result->cep ?></span><br />
+                        <span><?= esc($result->rua) . ', ' . esc($result->numero) . ', ' . esc($result->bairro) ?></span><br />
+                        <span><?= esc($result->complemento) . ' - ' . esc($result->cidade) . ' - ' . esc($result->estado) ?></span><br />
+                        <span>CEP: <?= esc($result->cep) ?></span><br />
                     </div>
                 </div>
 
@@ -143,10 +143,10 @@
                     <div class="pagamento">
                         <div class="qrcode">
                             <?php if ($chaveFormatada) : ?>
-                                <div><img width="130px" src="<?= $qrCode ?>" alt="QR Code de Pagamento" /></div>
+                                <div><img width="130px" src="<?= esc($qrCode) ?>" alt="QR Code de Pagamento" /></div>
                                 <div style="display: flex; flex-wrap: wrap; align-content: center;">
                                     <div style="width: 100%; text-align:center;"><i class="fas fa-camera"></i><br />Escaneie o QRCode ao lado para pagar por Pix</div>
-                                    <div class="chavePix">Chave Pix: <b><?= $chaveFormatada ?></b></div>
+                                    <div class="chavePix">Chave Pix: <b><?= esc($chaveFormatada) ?></b></div>
                                 </div>
                             <?php else: ?>
                                 <div></div>
@@ -196,7 +196,7 @@
                     <span>VENDA <b>#<?= str_pad($result->idVendas, 4, 0, STR_PAD_LEFT) ?></b></span>
                 </div>
                 <div class="vendedor">
-                    <span><b>Vendedor : <?php echo $result->nome; ?> </b></span>
+                    <span><b>Vendedor : <?= esc($result->nome) ?> </b></span>
                 </div>
             </footer>
         </div>
diff --git a/application/views/conecte/login.php b/application/views/conecte/login.php
index 9826a6dd0..78f2401c4 100644
--- a/application/views/conecte/login.php
+++ b/application/views/conecte/login.php
@@ -2,21 +2,21 @@
 <html lang="pt-br">
 
 <head>
-    <title><?php echo $this->config->item('app_name') ?></title>
+    <title><?= esc($this->config->item('app_name')) ?></title>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="description" content="<?php echo $this->config->item('app_name') . ' - ' . $this->config->item('app_subname') ?>">
+    <meta name="description" content="<?= esc($this->config->item('app_name')) . ' - ' . esc($this->config->item('app_subname')) ?>">
     <meta name="csrf-token-name" content="<?= config_item("csrf_token_name") ?>">
     <meta name="csrf-cookie-name" content="<?= config_item("csrf_cookie_name") ?>">
-    <link rel="stylesheet" href="<?php echo base_url() ?>assets/css/bootstrap.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url() ?>assets/css/bootstrap-responsive.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url() ?>assets/css/matrix-login.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/matrix-login.css" />
     <link href="<?= base_url('assets/css/particula.css'); ?>" rel="stylesheet">
-    <link href="<?php echo base_url(); ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
-    <script src="<?php echo base_url() ?>assets/js/jquery-1.12.4.min.js"></script>
-    <link rel="shortcut icon" href="<?php echo base_url(); ?>assets/img/favicon.png">
-    <script src="<?php echo base_url() ?>assets/js/jquery.mask.min.js"></script>
-    <script src="<?php echo base_url() ?>assets/js/funcoes.js"></script>
+    <link href="<?= base_url() ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
+    <script src="<?= base_url() ?>assets/js/jquery-1.12.4.min.js"></script>
+    <link rel="shortcut icon" href="<?= base_url() ?>assets/img/favicon.png">
+    <script src="<?= base_url() ?>assets/js/jquery.mask.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/funcoes.js"></script>
     <link href='https://unpkg.com/boxicons@2.1.1/css/boxicons.min.css' rel='stylesheet'>
     <!-- Script webeddy.com.br -->
     <script>
@@ -43,11 +43,11 @@ function formatar(mascara, documento) {
     <div class="main-login">
         <div class="left-login">
             <h1 class="h-one">Área do Cliente</h1>
-            <img src="<?php echo base_url() ?>assets/img/forms-animate.svg" class="left-login-imagec" alt="Map-OS 5.0">
+            <img src="<?= base_url() ?>assets/img/forms-animate.svg" class="left-login-imagec" alt="Map-OS 5.0">
         </div>
 
         <div id="loginbox">
-            <form class="form-vertical" id="formLogin" method="post" action="<?php echo site_url() ?>/mine/login">
+            <form class="form-vertical" id="formLogin" method="post" action="<?= site_url() ?>/mine/login">
                 <input type="hidden" name="<?= $this->security->get_csrf_token_name(); ?>" value="<?= $this->security->get_csrf_hash(); ?>">
                 <div class="d-flex flex-column">
                     <div class="right-login">
@@ -56,18 +56,18 @@ function formatar(mascara, documento) {
                                 <div class="content">
                                     <div id="newlog">
                                         <div class="icon2">
-                                            <img src="<?php echo base_url() ?>assets/img/logo-two.png">
+                                            <img src="<?= base_url() ?>assets/img/logo-two.png">
                                         </div>
                                         <div class="title01">
-                                            <img src="<?php echo base_url() ?>assets/img/logo-mapos-branco.png">
+                                            <img src="<?= base_url() ?>assets/img/logo-mapos-branco.png">
                                         </div>
                                     </div>
-                                    <div id="mcell">Versão: <?= $this->config->item('app_version'); ?></div>
+                                    <div id="mcell">Versão: <?= esc($this->config->item('app_version')); ?></div>
                                     <div class="control-group">
                                         <div class="controls">
                                             <div class="main_input_box">
                                                 <span class="add-on bg_lg"><i class='bx bx-user-plus iconU'></i></span>
-                                                <input id="email" name="email" type="text" placeholder="Email" value="<?php echo trim($parse_email); ?>" />
+                                                <input id="email" name="email" type="text" placeholder="Email" value="<?= trim($parse_email) ?>" />
                                             </div>
                                         </div>
                                     </div>
@@ -97,27 +97,29 @@ function formatar(mascara, documento) {
         </div>
     </div>
 
-    <script src="<?php echo base_url() ?>assets/js/bootstrap.min.js"></script>
-    <script src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
-    <script src="<?php echo base_url() ?>assets/js/sweetalert2.all.min.js"></script>
-    <?php if ($this->session->flashdata('success') != null) { ?>
+    <script src="<?= base_url() ?>assets/js/bootstrap.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
+    <script src="<?= base_url() ?>assets/js/sweetalert2.all.min.js"></script>
+    <?php if ($var = $this->session->flashdata('success')) { ?>
         <script>
             Swal.fire({
                 position: 'center',
                 icon: 'success',
-                title: '<?php echo $this->session->flashdata('success'); ?>',
+                title: 'Sucesso!',
+                text: <?= esc_msg($var) ?>,
                 showConfirmButton: false,
                 timer: 4000
             })
         </script>
     <?php } ?>
 
-    <?php if ($this->session->flashdata('error') != null) { ?>
+    <?php if ($var = $this->session->flashdata('error')) { ?>
         <script>
             Swal.fire({
                 position: 'center',
                 icon: 'error',
-                title: '<?php echo $this->session->flashdata('error'); ?>',
+                title: 'Falha!',
+                text: <?= esc_msg($var) ?>,
                 showConfirmButton: false,
                 timer: 4000
             })
@@ -152,12 +154,12 @@ function formatar(mascara, documento) {
 
                     $.ajax({
                         type: "POST",
-                        url: "<?php echo base_url(); ?>index.php/mine/login?ajax=true",
+                        url: "<?= base_url() ?>index.php/mine/login?ajax=true",
                         data: dados,
                         dataType: 'json',
                         success: function(data) {
                             if (data.result == true) {
-                                window.location.href = "<?php echo base_url(); ?>index.php/mine/painel";
+                                window.location.href = "<?= base_url() ?>index.php/mine/painel";
                             } else {
                                 Swal.fire({
                                     position: 'center',
diff --git a/application/views/conecte/minha_os.php b/application/views/conecte/minha_os.php
index 91ea2d04b..c6e1a32bf 100644
--- a/application/views/conecte/minha_os.php
+++ b/application/views/conecte/minha_os.php
@@ -2,21 +2,21 @@
 <html lang="pt-br">
 
 <head>
-    <title><?php echo $this->config->item('app_name') ?></title>
+    <title><?= esc($this->config->item('app_name')) ?></title>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="description" content="<?php echo $this->config->item('app_name') . ' - ' . $this->config->item('app_subname') ?>">
+    <meta name="description" content="<?= esc($this->config->item('app_name')) . ' - ' . esc($this->config->item('app_subname')) ?>">
     <meta name="csrf-token-name" content="<?= config_item("csrf_token_name") ?>">
     <meta name="csrf-cookie-name" content="<?= config_item("csrf_cookie_name") ?>">
-    <link rel="shortcut icon" type="image/png" href="<?php echo base_url(); ?>assets/img/favicon.png" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/matrix-style.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/matrix-media.css" />
-    <link href="<?php echo base_url(); ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/fullcalendar.css" />
-    <link href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" rel="stylesheet">
-    <script type="text/javascript" src="<?php echo base_url(); ?>assets/js/jquery-1.10.2.min.js"></script>
+    <link rel="shortcut icon" type="image/png" href="<?= base_url() ?>assets/img/favicon.png" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/matrix-style.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/matrix-media.css" />
+    <link href="<?= base_url() ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/fullcalendar.css" />
+    <link href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" rel="stylesheet">
+    <script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-1.10.2.min.js"></script>
     <script type="text/javascript" src="<?= base_url(); ?>assets/js/funcoesGlobal.js"></script>
     <script type="text/javascript" src="<?= base_url(); ?>assets/js/csrf.js"></script>
 </head>
@@ -55,12 +55,12 @@
                                                     </tr>
                                                 <?php } else { ?>
                                                     <tr>
-                                                        <td style="width: 25%"><img src=" <?php echo $emitente[0]->url_logo; ?> "></td>
-                                                        <td><span style="font-size: 20px; "> <?php echo $emitente[0]->nome; ?></span> </br>
-                                                            <span><?php echo $emitente[0]->cnpj; ?> </br> <?php echo $emitente[0]->rua . ', nº:' . $emitente[0]->numero . ', ' . $emitente[0]->bairro . ' - ' . $emitente[0]->cidade . ' - ' . $emitente[0]->uf; ?> </span> </br>
-                                                            <span> E-mail: <?php echo $emitente[0]->email . ' - Fone: ' . $emitente[0]->telefone; ?></span>
+                                                        <td style="width: 25%"><img src=" <?= esc($emitente[0]->url_logo) ?> "></td>
+                                                        <td><span style="font-size: 20px; "> <?= esc($emitente[0]->nome) ?></span> </br>
+                                                            <span><?= esc($emitente[0]->cnpj) ?> </br> <?= esc($emitente[0]->rua) . ', nº:' . esc($emitente[0]->numero) . ', ' . esc($emitente[0]->bairro) . ' - ' . esc($emitente[0]->cidade) . ' - ' . esc($emitente[0]->uf) ?> </span> </br>
+                                                            <span> E-mail: <?= esc($emitente[0]->email) . ' - Fone: ' . esc($emitente[0]->telefone) ?></span>
                                                         </td>
-                                                        <td style="width: 18%; text-align: center"><span>Emissão: <?php echo date('d/m/Y') ?></span></td>
+                                                        <td style="width: 18%; text-align: center"><span>Emissão: <?= date('d/m/Y') ?></span></td>
                                                     </tr>
 
                                                 <?php } ?>
@@ -75,9 +75,9 @@
                                                             <li>
                                                                 <span>
                                                                     <h5>Cliente</h5>
-                                                                    <span><?php echo $result->nomeCliente ?></span><br />
-                                                                    <span><?php echo $result->rua ?>, <?php echo $result->numero ?>, <?php echo $result->bairro ?></span><br />
-                                                                    <span><?php echo $result->cidade ?> - <?php echo $result->estado ?></span>
+                                                                    <span><?= esc($result->nomeCliente) ?></span><br />
+                                                                    <span><?= esc($result->rua) ?>, <?= esc($result->numero) ?>, <?= esc($result->bairro) ?></span><br />
+                                                                    <span><?= esc($result->cidade) ?> - <?= esc($result->estado) ?></span>
                                                             </li>
                                                         </ul>
                                                     </td>
@@ -87,9 +87,9 @@
                                                                 <span>
                                                                     <h5>Responsável</h5>
                                                                 </span>
-                                                                <span><?php echo $result->nome ?></span> <br />
-                                                                <span>Telefone: <?php echo $result->telefone ?></span><br />
-                                                                <span>Email: <?php echo $result->email ?></span>
+                                                                <span><?= esc($result->nome) ?></span> <br />
+                                                                <span>Telefone: <?= esc($result->telefone) ?></span><br />
+                                                                <span>Email: <?= esc($result->email) ?></span>
                                                             </li>
                                                         </ul>
                                                     </td>
@@ -109,7 +109,7 @@
                                                         <tr>
                                                             <td>
                                                                 <strong>Descrição</strong><br>
-                                                                <?php echo printSafeHtml($result->descricaoProduto) ?>
+                                                                <?= printSafeHtml($result->descricaoProduto) ?>
                                                             </td>
                                                         </tr>
 
@@ -119,7 +119,7 @@
                                                         <tr>
                                                             <td>
                                                                 <strong>Defeito</strong><br>
-                                                                <?php echo printSafeHtml($result->defeito) ?>
+                                                                <?= printSafeHtml($result->defeito) ?>
                                                             </td>
                                                         </tr>
                                                     <?php } ?>
@@ -128,7 +128,7 @@
                                                         <tr>
                                                             <td>
                                                                 <strong>Laudo Técnico</strong> <br>
-                                                                <?php echo printSafeHtml($result->laudoTecnico) ?>
+                                                                <?= printSafeHtml($result->laudoTecnico) ?>
                                                             </td>
                                                         </tr>
                                                     <?php } ?>
@@ -137,7 +137,7 @@
                                                         <tr>
                                                             <td>
                                                                 <strong>Observações</strong> <br>
-                                                                <?php echo printSafeHtml($result->observacoes) ?>
+                                                                <?= printSafeHtml($result->observacoes) ?>
                                                             </td>
                                                         </tr>
                                                     <?php } ?>
@@ -186,7 +186,7 @@
 
                                                     <tr>
                                                         <td colspan="2" style="text-align: right"></td>
-                                                        <td style="text-align: center"><strong>Total: R$ <?php echo number_format($totalProdutos + $totalServico, 2, ',', '.'); ?></strong>
+                                                        <td style="text-align: center"><strong>Total: R$ <?= number_format($totalProdutos + $totalServico, 2, ',', '.') ?></strong>
                                                         </td>
                                                     </tr>
                                                 </tbody>
@@ -212,8 +212,8 @@ function PrintElem(elem) {
                         function Popup(data) {
                             var mywindow = window.open('', 'MapOs', 'height=600,width=800');
                             mywindow.document.write('<html><head><title>Map Os</title>');
-                            mywindow.document.write("<link rel='stylesheet' href='<?php echo base_url(); ?>assets/css/bootstrap.min.css' /><link rel='stylesheet' href='<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css' />");
-                            mywindow.document.write("<link rel='stylesheet' href='<?php echo base_url(); ?>assets/css/matrix-style.css' /> <link rel='stylesheet' href='<?php echo base_url(); ?>assets/css/matrix-media.css' />");
+                            mywindow.document.write("<link rel='stylesheet' href='<?= base_url() ?>assets/css/bootstrap.min.css' /><link rel='stylesheet' href='<?= base_url() ?>assets/css/bootstrap-responsive.min.css' />");
+                            mywindow.document.write("<link rel='stylesheet' href='<?= base_url() ?>assets/css/matrix-style.css' /> <link rel='stylesheet' href='<?= base_url() ?>assets/css/matrix-media.css' />");
 
 
                             mywindow.document.write('</head><body >');
@@ -236,13 +236,13 @@ function Popup(data) {
     </div>
     <!--Footer-part-->
     <div class="row-fluid">
-        <div id="footer" class="span12"> <?= date('Y') ?> &copy; <?php echo $this->config->item('app_name'); ?> - Versão <?php echo $this->config->item('app_version'); ?></div>
+        <div id="footer" class="span12"> <?= date('Y') ?> &copy; <?= esc($this->config->item('app_name')) ?> - Versão <?= esc($this->config->item('app_version')) ?></div>
     </div>
 
     <!-- javascript
 ================================================== -->
 
-    <script src="<?php echo base_url(); ?>assets/js/bootstrap.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/bootstrap.min.js"></script>
 
 
 </body>
diff --git a/application/views/conecte/nova_senha.php b/application/views/conecte/nova_senha.php
index f8f2a2321..840a76dd9 100644
--- a/application/views/conecte/nova_senha.php
+++ b/application/views/conecte/nova_senha.php
@@ -2,25 +2,25 @@
 <html lang="pt-br">
 
 <head>
-    <title>Mine - Área do Cliente - <?php echo $this->config->item('app_name') ?></title>
+    <title>Mine - Área do Cliente - <?= esc($this->config->item('app_name')) ?></title>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="description" content="<?php echo $this->config->item('app_name') . ' - ' . $this->config->item('app_subname') ?>">
+    <meta name="description" content="<?= esc($this->config->item('app_name')) . ' - ' . esc($this->config->item('app_subname')) ?>">
     <meta name="csrf-token-name" content="<?= config_item("csrf_token_name") ?>">
     <meta name="csrf-cookie-name" content="<?= config_item("csrf_cookie_name") ?>">
-    <link rel="shortcut icon" type="image/png" href="<?php echo base_url(); ?>assets/img/favicon.png" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/matrix-style.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/matrix-media.css" />
-    <link href="<?php echo base_url(); ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/fullcalendar.css" />
-    <link href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" rel="stylesheet">
+    <link rel="shortcut icon" type="image/png" href="<?= base_url() ?>assets/img/favicon.png" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/matrix-style.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/matrix-media.css" />
+    <link href="<?= base_url() ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/fullcalendar.css" />
+    <link href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" rel="stylesheet">
     <link href='https://unpkg.com/boxicons@2.1.1/css/boxicons.min.css' rel='stylesheet'>
-    <script type="text/javascript" src="<?php echo base_url(); ?>assets/js/jquery-1.12.4.min.js"></script>
-    <script src="<?php echo base_url() ?>assets/js/jquery.mask.min.js"></script>
-    <script src="<?php echo base_url() ?>assets/js/sweetalert2.all.min.js"></script>
-    <script src="<?php echo base_url() ?>assets/js/funcoes.js"></script>
+    <script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-1.12.4.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/jquery.mask.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/sweetalert2.all.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/funcoes.js"></script>
     <script type="text/javascript" src="<?= base_url(); ?>assets/js/funcoesGlobal.js"></script>
     <script type="text/javascript" src="<?= base_url(); ?>assets/js/csrf.js"></script>
 </head>
@@ -50,7 +50,7 @@
                 <div class="span12">
                     <div class="span6 offset3" style="display:flex;justify-content: center">
                         <button name="senhaClient" id="senhaClient" type="submit" class="button btn btn-success btn-large"><span class="button__icon"><i class='bx bx-lock-open'></i></span><span class="button__text2">Alterar</span></button>
-                        <a href="<?php echo base_url() ?>index.php/mine" id="" class="button btn btn-warning"><span class="button__icon"><i class='bx bx-lock-alt'></i></span><span class="button__text2">Acessar</span></a>
+                        <a href="<?= base_url() ?>index.php/mine" id="" class="button btn btn-warning"><span class="button__icon"><i class='bx bx-lock-alt'></i></span><span class="button__text2">Acessar</span></a>
                     </div>
                 </div>
             </div>
@@ -58,18 +58,18 @@
         </div>
     </div>
 
-    <script src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
+    <script src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
     <script type="text/javascript">
         $(document).ready(function() {
 
             $(document).on('click', '#senhaClient', function(event) {
                 event.preventDefault();
                 var senha = $("input[name='senha']").val();
-                var token = "<?= $token ?>";
+                var token = <?= esc_js($token) ?>;
 
                 $.ajax({
                     type: "POST",
-                    url: "<?php echo base_url() ?>index.php/mine/senhaSalvar",
+                    url: "<?= base_url() ?>index.php/mine/senhaSalvar",
                     dataType: 'json',
                     data: {
                         token: token,
@@ -82,7 +82,7 @@
                                 title: "Salvo com Sucesso",
                                 text: data.message
                             });
-                            window.location.replace("<?php echo base_url() ?>index.php/mine/");
+                            window.location.replace("<?= base_url() ?>index.php/mine/");
                         } else {
                             Swal.fire({
                                 type: "error",
@@ -107,14 +107,14 @@
     <!--Footer-part-->
     <div class="row-fluid">
         <div id="footer" class="span12" style="padding: 10px"> <a class="pecolor" href="https://github.com/RamonSilva20/mapos" target="_blank">
-                <?= date('Y') ?> &copy; Ramon Silva - <?php echo $this->config->item('app_name') ?> - Versão: <?= $this->config->item('app_version'); ?>
+                <?= date('Y') ?> &copy; Ramon Silva - <?= esc($this->config->item('app_name')) ?> - Versão: <?= esc($this->config->item('app_version')); ?>
             </a></div>
     </div>
 
     <!-- javascript
 ================================================== -->
 
-    <script src="<?php echo base_url(); ?>assets/js/bootstrap.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/bootstrap.min.js"></script>
 </body>
 
 </html>
diff --git a/application/views/conecte/os.php b/application/views/conecte/os.php
index 566953608..1c3339655 100644
--- a/application/views/conecte/os.php
+++ b/application/views/conecte/os.php
@@ -3,7 +3,7 @@
 if (!$this->session->userdata('cadastra_os')) { ?>
     <div class="span12" style="margin-left: 0">
         <div class="span3">
-            <a href="<?php echo base_url(); ?>index.php/mine/adicionarOs" class="button btn btn-success" style="max-width: 150px">
+            <a href="<?= base_url() ?>index.php/mine/adicionarOs" class="button btn btn-success" style="max-width: 150px">
               <span class="button__icon"><i class='bx bx-plus-circle'></i></span><span class="button__text2">Adicionar</span></a>
         </div>
     </div>
diff --git a/application/views/conecte/painel.php b/application/views/conecte/painel.php
index d5259780d..bdde79e55 100644
--- a/application/views/conecte/painel.php
+++ b/application/views/conecte/painel.php
@@ -3,42 +3,42 @@
 <div class="quick-actions_homepage">
     <ul class="cardBox">
         <li class="card">
-            <a href="<?php echo base_url() ?>index.php/mine/os">
+            <a href="<?= base_url() ?>index.php/mine/os">
                 <div class="lord-icon04">
                     <i class='bx bx-file iconBx04'></i>
                 </div>
             </a>
-            <a href="<?php echo base_url() ?>index.php/mine/os">
+            <a href="<?= base_url() ?>index.php/mine/os">
                 <div style="font-size: 1.2em" class="numbers">Ordens de Serviço</div>
             </a>
         </li>
 
         <li class="card">
-            <a href="<?php echo base_url() ?>index.php/mine/compras">
+            <a href="<?= base_url() ?>index.php/mine/compras">
                 <div class="lord-icon05">
                     <i class='bx bx-cart-alt iconBx05'></i>
                 </div>
             </a>
-            <a href="<?php echo base_url() ?>index.php/mine/compras">
+            <a href="<?= base_url() ?>index.php/mine/compras">
                 <div style="font-size: 1.2em" class="numbers">Compras&nbsp;&nbsp;&nbsp;&nbsp;</div>
             </a>
         <li class="card">
-            <a href="<?php echo base_url() ?>index.php/mine/cobrancas">
+            <a href="<?= base_url() ?>index.php/mine/cobrancas">
                 <div class="lord-icon05">
                     <i class='bx bx-credit-card-front iconBx05'></i>
                 </div>
             </a>
-            <a href="<?php echo base_url() ?>index.php/mine/cobrancas">
+            <a href="<?= base_url() ?>index.php/mine/cobrancas">
                 <div style="font-size: 1.2em" class="numbers">Cobranças&nbsp;&nbsp;&nbsp;&nbsp;</div>
             </a>
         </li>
         <li class="card">
-            <a href="<?php echo base_url() ?>index.php/mine/conta">
+            <a href="<?= base_url() ?>index.php/mine/conta">
                 <div class="lord-icon07">
                     <i class='bx bx-user-circle iconBx07'></i></span>
                 </div>
             </a>
-            <a href="<?php echo base_url() ?>index.php/mine/conta">
+            <a href="<?= base_url() ?>index.php/mine/conta">
                 <div style="font-size: 1.2em" class="numbers">Minha Conta</div>
             </a>
         </li>
diff --git a/application/views/conecte/resetar_senha.php b/application/views/conecte/resetar_senha.php
index 70ebffed5..16772e629 100644
--- a/application/views/conecte/resetar_senha.php
+++ b/application/views/conecte/resetar_senha.php
@@ -2,25 +2,25 @@
 <html lang="pt-br">
 
 <head>
-    <title>Mine - Área do Cliente - <?php echo $this->config->item('app_name') ?></title>
+    <title>Mine - Área do Cliente - <?= esc($this->config->item('app_name')) ?></title>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="description" content="<?php echo $this->config->item('app_name') . ' - ' . $this->config->item('app_subname') ?>">
+    <meta name="description" content="<?= esc($this->config->item('app_name')) . ' - ' . esc($this->config->item('app_subname')) ?>">
     <meta name="csrf-token-name" content="<?= config_item("csrf_token_name") ?>">
     <meta name="csrf-cookie-name" content="<?= config_item("csrf_cookie_name") ?>">
-    <link rel="shortcut icon" type="image/png" href="<?php echo base_url(); ?>assets/img/favicon.png" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/matrix-style.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/matrix-media.css" />
-    <link href="<?php echo base_url(); ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/fullcalendar.css" />
-    <link href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" rel="stylesheet">
+    <link rel="shortcut icon" type="image/png" href="<?= base_url() ?>assets/img/favicon.png" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/matrix-style.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/matrix-media.css" />
+    <link href="<?= base_url() ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/fullcalendar.css" />
+    <link href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" rel="stylesheet">
     <link href='https://unpkg.com/boxicons@2.1.1/css/boxicons.min.css' rel='stylesheet'>
-    <script type="text/javascript" src="<?php echo base_url(); ?>assets/js/jquery-1.12.4.min.js"></script>
-    <script src="<?php echo base_url() ?>assets/js/jquery.mask.min.js"></script>
-    <script src="<?php echo base_url() ?>assets/js/sweetalert2.all.min.js"></script>
-    <script src="<?php echo base_url() ?>assets/js/funcoes.js"></script>
+    <script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-1.12.4.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/jquery.mask.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/sweetalert2.all.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/funcoes.js"></script>
     <script type="text/javascript" src="<?= base_url(); ?>assets/js/funcoesGlobal.js"></script>
     <script type="text/javascript" src="<?= base_url(); ?>assets/js/csrf.js"></script>
 </head>
@@ -33,7 +33,7 @@
             </div>
             <div class="widget-content nopadding tab-content">
 
-                <form action="<?php echo base_url() . "index.php/mine/gerarTokenResetarSenha" ?>" id="formCliente" method="post" class="form-horizontal">
+                <form action="<?= base_url() . "index.php/mine/gerarTokenResetarSenha" ?>" id="formCliente" method="post" class="form-horizontal">
 
                     <div class="control-group" style="display: flex;margin-bottom: 7pxpx;grid-column-gap: 5px;justify-content: space-evenly;border-bottom: 0px">
                         <label style="width: auto" for="email" class="control-label">Email<span class="required">*</span></label>
@@ -46,7 +46,7 @@
                         <div class="span12">
                             <div class="span6 offset3" style="display:flex;justify-content: center">
                                 <button type="submit" class="button btn btn-success btn-large"><span class="button__icon"><i class='bx bx-mail-send'></i></span><span class="button__text2">Enviar</span></button>
-                                <a href="<?php echo base_url() ?>index.php/mine" id="" class="button btn btn-warning"><span class="button__icon"><i class='bx bx-lock-alt'></i></span><span class="button__text2">Acessar</span></a>
+                                <a href="<?= base_url() ?>index.php/mine" id="" class="button btn btn-warning"><span class="button__icon"><i class='bx bx-lock-alt'></i></span><span class="button__text2">Acessar</span></a>
                             </div>
                         </div>
                     </div>
@@ -55,26 +55,28 @@
         </div>
     </div>
 
-    <script src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
-    <script src="<?php echo base_url() ?>assets/js/sweetalert2.all.min.js"></script>
-    <?php if ($this->session->flashdata('success') != null) { ?>
+    <script src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
+    <script src="<?= base_url() ?>assets/js/sweetalert2.all.min.js"></script>
+    <?php if ($var = $this->session->flashdata('success')) { ?>
         <script>
             Swal.fire({
                 position: 'center',
                 icon: 'success',
-                title: '<?php echo $this->session->flashdata('success'); ?>',
+                title: 'Sucesso!',
+                text: <?= esc_msg($var) ?>,
                 showConfirmButton: false,
                 timer: 4000
             })
         </script>
     <?php } ?>
 
-    <?php if ($this->session->flashdata('error') != null) { ?>
+    <?php if ($var = $this->session->flashdata('error')) { ?>
         <script>
             Swal.fire({
                 position: 'center',
                 icon: 'error',
-                title: '<?php echo $this->session->flashdata('error'); ?>',
+                title: 'Falha!',
+                text: <?= esc_msg($var) ?>,
                 showConfirmButton: false,
                 timer: 4000
             })
@@ -111,14 +113,14 @@
     <!--Footer-part-->
     <div class="row-fluid">
         <div id="footer" class="span12" style="padding: 10px"> <a class="pecolor" href="https://github.com/RamonSilva20/mapos" target="_blank">
-                <?= date('Y') ?> &copy; Ramon Silva - <?php echo $this->config->item('app_name') ?> - Versão: <?= $this->config->item('app_version'); ?>
+                <?= date('Y') ?> &copy; Ramon Silva - <?= esc($this->config->item('app_name')) ?> - Versão: <?= esc($this->config->item('app_version')); ?>
             </a></div>
     </div>
 
     <!-- javascript
 ================================================== -->
 
-    <script src="<?php echo base_url(); ?>assets/js/bootstrap.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/bootstrap.min.js"></script>
 </body>
 
 </html>
diff --git a/application/views/conecte/template.php b/application/views/conecte/template.php
index 24d59e22d..69384d30a 100644
--- a/application/views/conecte/template.php
+++ b/application/views/conecte/template.php
@@ -2,23 +2,23 @@
 <html lang="pt-br">
 
 <head>
-    <title>Área do Cliente - <?php echo $this->config->item('app_name') ?></title>
+    <title>Área do Cliente - <?= esc($this->config->item('app_name')) ?></title>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="description" content="<?php echo $this->config->item('app_name') . ' - ' . $this->config->item('app_subname') ?>">
+    <meta name="description" content="<?= esc($this->config->item('app_name')) . ' - ' . esc($this->config->item('app_subname')) ?>">
     <meta name="csrf-token-name" content="<?= config_item("csrf_token_name") ?>">
     <meta name="csrf-cookie-name" content="<?= config_item("csrf_cookie_name") ?>">
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/matrix-style.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/matrix-media.css" />
-    <link href="<?php echo base_url(); ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/fullcalendar.css" />
-    <link href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" rel="stylesheet">
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/conecte-mobile.css" />
-    <script type="text/javascript" src="<?php echo base_url(); ?>assets/js/jquery-1.12.4.min.js"></script>
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/matrix-style.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/matrix-media.css" />
+    <link href="<?= base_url() ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/fullcalendar.css" />
+    <link href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" rel="stylesheet">
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/conecte-mobile.css" />
+    <script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-1.12.4.min.js"></script>
     <script type="text/javascript" src="<?= base_url(); ?>assets/js/sweetalert.min.js"></script>
-    <link rel="shortcut icon" href="<?php echo base_url(); ?>assets/img/favicon.png">
+    <link rel="shortcut icon" href="<?= base_url() ?>assets/img/favicon.png">
     <link href='https://unpkg.com/boxicons@2.1.1/css/boxicons.min.css' rel='stylesheet'>
     <script type="text/javascript" src="<?= base_url(); ?>assets/js/funcoesGlobal.js"></script>
     <script type="text/javascript" src="<?= base_url(); ?>assets/js/csrf.js"></script>
@@ -34,7 +34,7 @@
 
     <!--Header-part-->
     <div id="header">
-        <h1><a href="dashboard.html"><?php echo $this->config->item('app_name'); ?></a></h1>
+        <h1><a href="dashboard.html"><?= esc($this->config->item('app_name')) ?></a></h1>
     </div>
     <!--close-Header-part-->
 
@@ -43,11 +43,11 @@
         <div id="user-nav" class="navbar navbar-inverse">
             <ul class="nav">
                 <li class="dropdown">
-                    <a href="#" class="dropdown-toggle" data-toggle="dropdown"><i class='bx bx-user-circle iconN1'></i> <?= $this->session->userdata('nome') ?> </a>
+                    <a href="#" class="dropdown-toggle" data-toggle="dropdown"><i class='bx bx-user-circle iconN1'></i> <?= esc($this->session->userdata('nome')) ?> </a>
                     <ul class="dropdown-menu">
-                        <li class=""><a title="Meu Perfil" href="<?php echo base_url() ?>index.php/mine/conta"><i class="fas fa-user"></i> <span class="text">Meu Perfil</span></a></li>
+                        <li class=""><a title="Meu Perfil" href="<?= base_url() ?>index.php/mine/conta"><i class="fas fa-user"></i> <span class="text">Meu Perfil</span></a></li>
                         <li class="divider"></li>
-                        <li class=""><a title="Sair" href="<?php echo base_url() ?>index.php/mine/sair"><i class="fas fa-sign-out-alt"></i> <span class="text">Sair</span></a></li>
+                        <li class=""><a title="Sair" href="<?= base_url() ?>index.php/mine/sair"><i class="fas fa-sign-out-alt"></i> <span class="text">Sair</span></a></li>
                     </ul>
                 </li>
             </ul>
@@ -57,7 +57,7 @@
     <nav id="sidebar">
         <div id="newlog">
             <div class="icon2">
-                <img src="<?php echo base_url() ?>assets/img/logo-two.png">
+                <img src="<?= base_url() ?>assets/img/logo-two.png">
             </div>
             <div class="title1">
                 <img src="<?= base_url() ?>assets/img/logo-mapos-branco.png">
@@ -77,19 +77,19 @@
                 <ul class="menu-links" style="position: relative;">
                     <li class="<?php if (isset($menuPainel)) {
                         echo 'active';
-                    }; ?>"><a class="tip-bottom" title="" href="<?php echo base_url() ?>index.php/mine/painel"><i class='bx bx-home-alt iconX'></i> <span class="title">Painel</span></a></li>
+                    }; ?>"><a class="tip-bottom" title="" href="<?= base_url() ?>index.php/mine/painel"><i class='bx bx-home-alt iconX'></i> <span class="title">Painel</span></a></li>
                     <li class="<?php if (isset($menuConta)) {
                         echo 'active';
-                    }; ?>"><a class="tip-bottom" title="" href="<?php echo base_url() ?>index.php/mine/conta"><i class="bx bx-user-circle iconX"></i> <span class="title">Minha Contas</span></a></li>
+                    }; ?>"><a class="tip-bottom" title="" href="<?= base_url() ?>index.php/mine/conta"><i class="bx bx-user-circle iconX"></i> <span class="title">Minha Contas</span></a></li>
                     <li class="<?php if (isset($menuOs)) {
                         echo 'active';
-                    }; ?>"><a class="tip-bottom" title="" href="<?php echo base_url() ?>index.php/mine/os"><i class='bx bx-spreadsheet iconX'></i> <span class="title">Ordens de Serviço</span></a></li>
+                    }; ?>"><a class="tip-bottom" title="" href="<?= base_url() ?>index.php/mine/os"><i class='bx bx-spreadsheet iconX'></i> <span class="title">Ordens de Serviço</span></a></li>
                     <li class="<?php if (isset($menuVendas)) {
                         echo 'active';
-                    }; ?>"><a class="tip-bottom" title="" href="<?php echo base_url() ?>index.php/mine/compras"><i class='bx bx-cart-alt iconX'></i> <span class="title">Compras</span></a></li>
+                    }; ?>"><a class="tip-bottom" title="" href="<?= base_url() ?>index.php/mine/compras"><i class='bx bx-cart-alt iconX'></i> <span class="title">Compras</span></a></li>
                     <li class="<?php if (isset($menuCobrancas)) {
                         echo 'active';
-                    }; ?>"><a class="tip-bottom" title="" href="<?php echo base_url() ?>index.php/mine/cobrancas"><i class='bx bx-credit-card-front iconX'></i> <span class="title">Cobranças</span></a></li>
+                    }; ?>"><a class="tip-bottom" title="" href="<?= base_url() ?>index.php/mine/cobrancas"><i class='bx bx-credit-card-front iconX'></i> <span class="title">Cobranças</span></a></li>
                 </ul>
             </div>
 
@@ -106,19 +106,23 @@
 
     <div style="background: #f3f4f6" id="content">
         <div class="content-header" id="content-header">
-            <div id="breadcrumb"><a href="<?php echo base_url(); ?>index.php/mine/painel" title="Painel" class="tip-bottom"><i class="fas fa-home"></i> Painel</a></div>
+            <div id="breadcrumb"><a href="<?= base_url() ?>index.php/mine/painel" title="Painel" class="tip-bottom"><i class="fas fa-home"></i> Painel</a></div>
         </div>
 
         <div class="container-fluid">
             <div class="row-fluid">
 
                 <div class="span12">
-                    <?php if ($var = $this->session->flashdata('success')) : ?><script>
-                            swal("Sucesso!", "<?php echo str_replace('"', '', $var); ?>", "success");
-                        </script><?php endif; ?>
-                    <?php if ($var = $this->session->flashdata('error')) : ?><script>
-                            swal("Falha!", "<?php echo str_replace('"', '', $var); ?>", "error");
-                        </script><?php endif; ?>
+                    <?php if ($var = $this->session->flashdata('success')) : ?>
+                        <script>
+                            swal('Sucesso!', <?= esc_msg($var) ?>, 'success');
+                        </script>
+                    <?php endif; ?>
+                    <?php if ($var = $this->session->flashdata('error')) : ?>
+                        <script>
+                            swal('Falha!', <?= esc_msg($var) ?>, 'error');
+                        </script>
+                    <?php endif; ?>
                     <?php if (isset($output)) {
                         $this->load->view($output);
                     } ?>
@@ -132,8 +136,8 @@
     <div class="row-fluid">
         <div id="footer" class="span12">
             <?= date('Y') ?> &copy;
-            <?php echo $this->config->item('app_name'); ?> - Versão:
-            <?php echo $this->config->item('app_version'); ?>
+            <?= esc($this->config->item('app_name')) ?> - Versão:
+            <?= esc($this->config->item('app_version')) ?>
         </div>
     </div>
 
diff --git a/application/views/conecte/token_digita.php b/application/views/conecte/token_digita.php
index caa151849..060017570 100644
--- a/application/views/conecte/token_digita.php
+++ b/application/views/conecte/token_digita.php
@@ -2,25 +2,25 @@
 <html lang="pt-br">
 
 <head>
-    <title>Mine - Área do Cliente - <?php echo $this->config->item('app_name') ?></title>
+    <title>Mine - Área do Cliente - <?= esc($this->config->item('app_name')) ?></title>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="description" content="<?php echo $this->config->item('app_name') . ' - ' . $this->config->item('app_subname') ?>">
+    <meta name="description" content="<?= esc($this->config->item('app_name')) . ' - ' . esc($this->config->item('app_subname')) ?>">
     <meta name="csrf-token-name" content="<?= config_item("csrf_token_name") ?>">
     <meta name="csrf-cookie-name" content="<?= config_item("csrf_cookie_name") ?>">
-    <link rel="shortcut icon" type="image/png" href="<?php echo base_url(); ?>assets/img/favicon.png" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/matrix-style.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/matrix-media.css" />
-    <link href="<?php echo base_url(); ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/fullcalendar.css" />
-    <link href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" rel="stylesheet">
+    <link rel="shortcut icon" type="image/png" href="<?= base_url() ?>assets/img/favicon.png" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/matrix-style.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/matrix-media.css" />
+    <link href="<?= base_url() ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/fullcalendar.css" />
+    <link href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" rel="stylesheet">
     <link href='https://unpkg.com/boxicons@2.1.1/css/boxicons.min.css' rel='stylesheet'>
-    <script type="text/javascript" src="<?php echo base_url(); ?>assets/js/jquery-1.12.4.min.js"></script>
-    <script src="<?php echo base_url() ?>assets/js/jquery.mask.min.js"></script>
-    <script src="<?php echo base_url() ?>assets/js/sweetalert2.all.min.js"></script>
-    <script src="<?php echo base_url() ?>assets/js/funcoes.js"></script>
+    <script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-1.12.4.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/jquery.mask.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/sweetalert2.all.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/funcoes.js"></script>
     <script type="text/javascript" src="<?= base_url(); ?>assets/js/funcoesGlobal.js"></script>
     <script type="text/javascript" src="<?= base_url(); ?>assets/js/csrf.js"></script>
 </head>
@@ -35,7 +35,7 @@
                 <span class="required">Digite ou copie e cole o token enviado para seu email.</span>
             </div>
             <div class="widget-content nopadding tab-content">
-                <form action="<?php echo base_url() . 'index.php/mine/tokenManual' ?>" id="formCliente" method="post" class="form-horizontal">
+                <form action="<?= base_url() . 'index.php/mine/tokenManual' ?>" id="formCliente" method="post" class="form-horizontal">
 
                     <div class="control-group" style="display: flex;margin-bottom: 7pxpx;grid-column-gap: 5px;justify-content: space-evenly">
                         <label style="width: auto" for="token" class="control-label">Token<span class="required">*</span></label>
@@ -49,7 +49,7 @@
                 <div class="span12">
                     <div class="span6 offset3" style="display:flex;justify-content: center">
                         <button type="submit" class="button btn btn-success btn-large"><span class="button__icon"><i class='bx bx-check-shield'></i></span><span class="button__text2">Validar</span></button>
-                        <a href="<?php echo base_url() ?>index.php/mine" id="" class="button btn btn-warning"><span class="button__icon"><i class='bx bx-lock-alt'></i></span><span class="button__text2">Acessar</span></a>
+                        <a href="<?= base_url() ?>index.php/mine" id="" class="button btn btn-warning"><span class="button__icon"><i class='bx bx-lock-alt'></i></span><span class="button__text2">Acessar</span></a>
                     </div>
                 </div>
             </div>
@@ -58,25 +58,27 @@
     </div>
 
 
-    <script src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
-    <?php if ($this->session->flashdata('success') != null) { ?>
+    <script src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
+    <?php if ($var = $this->session->flashdata('success')) { ?>
         <script>
             Swal.fire({
                 position: 'center',
                 icon: 'success',
-                title: '<?php echo $this->session->flashdata('success'); ?>',
+                title: 'Sucesso!',
+                text: <?= esc_msg($var) ?>,
                 showConfirmButton: false,
                 timer: 2000
             })
         </script>
     <?php } ?>
 
-    <?php if ($this->session->flashdata('error') != null) { ?>
+    <?php if ($var = $this->session->flashdata('error')) { ?>
         <script>
             Swal.fire({
                 position: 'center',
                 icon: 'error',
-                title: '<?php echo $this->session->flashdata('error'); ?>',
+                title: 'Falha!',
+                text: <?= esc_msg($var) ?>,
                 showConfirmButton: false,
                 timer: 2000
             })
@@ -86,14 +88,14 @@
     <!--Footer-part-->
     <div class="row-fluid">
         <div id="footer" class="span12" style="padding: 10px"> <a class="pecolor" href="https://github.com/RamonSilva20/mapos" target="_blank">
-                <?= date('Y') ?> &copy; Ramon Silva - <?php echo $this->config->item('app_name') ?> - Versão: <?= $this->config->item('app_version'); ?>
+                <?= date('Y') ?> &copy; Ramon Silva - <?= esc($this->config->item('app_name')) ?> - Versão: <?= esc($this->config->item('app_version')); ?>
             </a></div>
     </div>
 
     <!-- javascript
 ================================================== -->
 
-    <script src="<?php echo base_url(); ?>assets/js/bootstrap.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/bootstrap.min.js"></script>
 </body>
 
 </html>
diff --git a/application/views/conecte/visualizar_compra.php b/application/views/conecte/visualizar_compra.php
index 31f78d6a4..86aa12df2 100644
--- a/application/views/conecte/visualizar_compra.php
+++ b/application/views/conecte/visualizar_compra.php
@@ -9,7 +9,7 @@
                 <h5>Venda</h5>
                 <div class="buttons">
 
-                    <a id="imprimir" target="_blank" title="Imprimir" class="btn btn-mini btn-inverse" href="<?php echo site_url(); ?>/mine/imprimirCompra/<?php echo $result->idVendas; ?>"><i class="fas fa-print"></i> Imprimir</a>
+                    <a id="imprimir" target="_blank" title="Imprimir" class="btn btn-mini btn-inverse" href="<?= site_url() ?>/mine/imprimirCompra/<?= esc($result->idVendas) ?>"><i class="fas fa-print"></i> Imprimir</a>
                 </div>
             </div>
             <div class="widget-content" id="printOs">
@@ -27,16 +27,16 @@
                                 } else { ?>
 
                                     <tr>
-                                        <td style="width: 25%"><img src=" <?php echo $emitente->url_logo; ?> "></td>
+                                        <td style="width: 25%"><img src=" <?= esc($emitente->url_logo) ?> "></td>
                                         <td> <span style="font-size: 20px; ">
-                                                <?php echo $emitente->nome; ?></span> </br><span>
-                                                <?php echo $emitente->cnpj; ?> </br>
-                                                <?php echo $emitente->rua . ', nº:' . $emitente->numero . ', ' . $emitente->bairro . ' - ' . $emitente->cidade . ' - ' . $emitente->uf; ?> </span> </br> <span> E-mail:
-                                                <?php echo $emitente->email . ' - Fone: ' . $emitente->telefone; ?> </br>
-                                                Responsável: <?php echo $result->nome ?></span></td>
+                                                <?= esc($emitente->nome) ?></span> </br><span>
+                                                <?= esc($emitente->cnpj) ?> </br>
+                                                <?= esc($emitente->rua) . ', nº:' . esc($emitente->numero) . ', ' . esc($emitente->bairro) . ' - ' . esc($emitente->cidade) . ' - ' . esc($emitente->uf) ?> </span> </br> <span> E-mail:
+                                                <?= esc($emitente->email) . ' - Fone: ' . esc($emitente->telefone) ?> </br>
+                                                Responsável: <?= esc($result->nome) ?></span></td>
                                         <td style="width: 18%; text-align: center">#Venda: <span>
-                                                <?php echo $result->idVendas ?></span></br> </br> <span>Emissão:
-                                                <?php echo date('d/m/Y'); ?></span></td>
+                                                <?= esc($result->idVendas) ?></span></br> </br> <span>Emissão:
+                                                <?= date('d/m/Y') ?></span></td>
                                     </tr>
 
                                 <?php
@@ -53,30 +53,30 @@
                                                 <span>
                                                     <h5>Cliente</h5>
                                                     <span>
-                                                        <?php echo $result->nomeCliente ?>
+                                                        <?= esc($result->nomeCliente) ?>
                                                     </span><br />
                                                     <span>
-                                                        <?php echo $result->rua ?>, <?php echo $result->numero ?>, <?php echo $result->bairro ?>
+                                                        <?= esc($result->rua) ?>, <?= esc($result->numero) ?>, <?= esc($result->bairro) ?>
                                                     </span><br/>
                                                     <span>
-                                                        <?php echo $result->cidade ?> - <?php echo $result->estado ?> - CEP: <?php echo $result->cep ?>
+                                                        <?= esc($result->cidade) ?> - <?= esc($result->estado) ?> - CEP: <?= esc($result->cep) ?>
                                                     </span><br/>
                                                     <span>
-                                                        Email: <?php echo $result->emailCliente ?>
+                                                        Email: <?= esc($result->emailCliente) ?>
                                                     </span></br>
                                                     <?php if ($result->contato) { ?>
-                                                        <span>Contato: <?php echo $result->contato ?> </span>
+                                                        <span>Contato: <?= esc($result->contato) ?> </span>
                                                     <?php } ?>
-                                                    <span>Celular: <?php echo $result->celular ?></span>
+                                                    <span>Celular: <?= esc($result->celular) ?></span>
 							                    </span>
                                             </li>
                                         </ul>
                                     </td>
                                     <?php if ($qrCode) : ?>
                                         <td style="width: 12%; padding: 0;text-align:center;">
-                                            <img style="margin:12px 0px 0px 0px" src="<?php echo base_url(); ?>assets/img/logo_pix.png" width="64px" alt="QR Code de Pagamento" /></br>
-                                            <img style="margin:5px 0px 0px 0px" width="94px" src="<?= $qrCode ?>" alt="QR Code de Pagamento" /></br>
-                                            <?php echo '<span style="margin:0px;font-size: 80%;text-align:center;">Chave PIX: ' . $chaveFormatada . '</span>' ;?>
+                                            <img style="margin:12px 0px 0px 0px" src="<?= base_url() ?>assets/img/logo_pix.png" width="64px" alt="QR Code de Pagamento" /></br>
+                                            <img style="margin:5px 0px 0px 0px" width="94px" src="<?= esc($qrCode) ?>" alt="QR Code de Pagamento" /></br>
+                                            <?= '<span style="margin:0px;font-size: 80%;text-align:center;">Chave PIX: ' . esc($chaveFormatada) . '</span>' ?>
                                         </td>
                                     <?php endif ?>
                                 </tr>
@@ -89,22 +89,22 @@
                                 <?php if ($result->dataVenda != null) { ?>
                                     <tr>
                                         <td>
-                                            <b>Status Venda: </b><?php echo $result->status ?>
+                                            <b>Status Venda: </b><?= esc($result->status) ?>
                                         </td>
 
                                         <td>
-                                            <b>Data da Venda: </b><?php echo date('d/m/Y', strtotime($result->dataVenda)); ?>
+                                            <b>Data da Venda: </b><?= date('d/m/Y', strtotime($result->dataVenda)) ?>
                                         </td>
 
                                         <td>
                                             <?php if ($result->garantia) { ?>
-                                                <b>Garantia: </b><?php echo $result->garantia . ' dia(s)'; ?>
+                                                <b>Garantia: </b><?= esc($result->garantia) . ' dia(s)' ?>
                                             <?php } ?>
                                         </td>
 
                                         <td>
                                             <?php if ($result->status == 'Finalizado' || $result->status == 'Faturado') { ?>
-                                                <b>Venc. da Garantia: </b><?php echo dateInterval($result->dataVenda, $result->garantia); ?>
+                                                <b>Venc. da Garantia: </b><?= dateInterval($result->dataVenda, $result->garantia) ?>
                                             <?php } ?>
                                         </td>
                                     </tr>
@@ -112,7 +112,7 @@
                                 <tr>
                                     <td colspan="4">
                                             <b>Observações: </b>
-                                        <?php echo printSafeHtml($result->observacoes_cliente) ?>
+                                        <?= printSafeHtml($result->observacoes_cliente) ?>
                                     </td>
                                 </tr>
                             </tbody>
@@ -147,7 +147,7 @@
                                     <tr>
                                         <td colspan="2" style="text-align: right"><strong>Total:</strong></td>
                                         <td><strong>R$
-                                                <?php echo number_format($totalProdutos, 2, ',', '.'); ?></strong></td>
+                                                <?= number_format($totalProdutos, 2, ',', '.') ?></strong></td>
                                     </tr>
                                 </tbody>
                             </table>
@@ -157,14 +157,14 @@
                         <hr />
 
                         <h4 style="text-align: right">Valor Total: R$
-                            <?php echo number_format($totalProdutos, 2, ',', '.'); ?>
+                            <?= number_format($totalProdutos, 2, ',', '.') ?>
                         </h4>
                         <?php if ($result->valor_desconto != 0 || $result->valor_desconto != 0) { ?>
                         <h4 style="text-align: right">Desconto: R$
-                            <?php echo number_format($result->valor_desconto - $totalProdutos, 2, ',', '.'); ?>
+                            <?= number_format($result->valor_desconto - $totalProdutos, 2, ',', '.') ?>
                         </h4>
                         <h4 style="text-align: right">Total Com Desconto: R$
-                            <?php echo number_format($result->valor_desconto, 2, ',', '.'); ?>
+                            <?= number_format($result->valor_desconto, 2, ',', '.') ?>
                         </h4>
                         <?php } ?>
                     </div>
diff --git a/application/views/conecte/visualizar_os.php b/application/views/conecte/visualizar_os.php
index 2f44b2898..ab3a883de 100644
--- a/application/views/conecte/visualizar_os.php
+++ b/application/views/conecte/visualizar_os.php
@@ -9,7 +9,7 @@
                 </span>
                 <h5>Ordem de Serviço</h5>
                 <div class="buttons" style=" padding-left:5px;">
-                    <a target="_blank" title="Imprimir Relatório" class="button btn btn-mini btn-inverse" href="<?php echo site_url() ?>/mine/imprimirOs/<?php echo $result->idOs; ?>">
+                    <a target="_blank" title="Imprimir Relatório" class="button btn btn-mini btn-inverse" href="<?= site_url() ?>/mine/imprimirOs/<?= esc($result->idOs) ?>">
                         <span class="button__icon"><i class="bx bx-printer"></i></span> <span class="button__text">Imprimir Relatório</span></a>
                 </div>
             </div>
@@ -25,17 +25,17 @@
                                     </tr>
                                 <?php } else { ?>
                                     <tr>
-                                        <td style="width: 25%"><img src=" <?php echo $emitente->url_logo; ?> " style="max-height: 100px"></td>
+                                        <td style="width: 25%"><img src=" <?= esc($emitente->url_logo) ?> " style="max-height: 100px"></td>
                                         <td>
-                                            <span style="font-size: 20px;"><?php echo $emitente->nome; ?></span></br>
-                                            <?php if ($emitente->cnpj != "00.000.000/0000-00") { ?><span class="icon"><i class="fas fa-fingerprint" style="margin:5px 1px"></i> <?php echo $emitente->cnpj; ?></span></br><?php } ?>
-                                            <span class="icon"><i class="fas fa-map-marker-alt" style="margin:4px 3px"></i> <?php echo $emitente->rua . ', ' . $emitente->numero . ', ' . $emitente->bairro . ' - ' . $emitente->cidade . ' - ' . $emitente->uf; ?></span></br>
-                                            <span class="icon"><i class="fas fa-comments" style="margin:5px 1px"></i> E-mail: <?php echo $emitente->email . ' - Fone: ' . $emitente->telefone; ?></span></br>
-                                            <span class="icon"><i class="fas fa-user-check"></i> Responsável: <?php echo $result->nome ?>
+                                            <span style="font-size: 20px;"><?= esc($emitente->nome) ?></span></br>
+                                            <?php if ($emitente->cnpj != "00.000.000/0000-00") { ?><span class="icon"><i class="fas fa-fingerprint" style="margin:5px 1px"></i> <?= esc($emitente->cnpj) ?></span></br><?php } ?>
+                                            <span class="icon"><i class="fas fa-map-marker-alt" style="margin:4px 3px"></i> <?= esc($emitente->rua) . ', ' . esc($emitente->numero) . ', ' . esc($emitente->bairro) . ' - ' . esc($emitente->cidade) . ' - ' . esc($emitente->uf) ?></span></br>
+                                            <span class="icon"><i class="fas fa-comments" style="margin:5px 1px"></i> E-mail: <?= esc($emitente->email) . ' - Fone: ' . esc($emitente->telefone) ?></span></br>
+                                            <span class="icon"><i class="fas fa-user-check"></i> Responsável: <?= esc($result->nome) ?>
                                         </td>
                                         <td style="width: 18%; text-align: center">
-                                            <span><b>N° OS: </b><?php echo $result->idOs ?></span></br></br>
-                                            <span>Emissão: <?php echo date('d/m/Y') ?></span>
+                                            <span><b>N° OS: </b><?= esc($result->idOs) ?></span></br></br>
+                                            <span>Emissão: <?= date('d/m/Y') ?></span>
                                         </td>
                                     </tr>
                                 <?php } ?>
@@ -49,25 +49,25 @@
                                     <?php if ($result->dataInicial != null) { ?>
                                         <tr>
                                             <td>
-                                                <b>STATUS OS: </b><?php echo $result->status ?>
+                                                <b>STATUS OS: </b><?= esc($result->status) ?>
                                             </td>
 
                                             <td>
-                                                <b>DATA INICIAL: </b><?php echo date('d/m/Y', strtotime($result->dataInicial)); ?>
+                                                <b>DATA INICIAL: </b><?= date('d/m/Y', strtotime($result->dataInicial)) ?>
                                             </td>
 
                                             <td>
-                                                <b>DATA FINAL: </b><?php echo $result->dataFinal ? date('d/m/Y', strtotime($result->dataFinal)) : ''; ?>
+                                                <b>DATA FINAL: </b><?= $result->dataFinal ? date('d/m/Y', strtotime($result->dataFinal)) : '' ?>
                                             </td>
 
                                             <td>
                                                 <?php if (!empty($result->garantia)) { ?>
-                                                    <b>GARANTIA: </b><?php echo $result->garantia . ' dia(s)'; ?>
+                                                    <b>GARANTIA: </b><?= esc($result->garantia) . ' dia(s)' ?>
                                                 <?php } ?>
                                             </td>
 
                                             <td>
-                                                <b><?php if ($result->status == 'Finalizado') { ?> VENC. DA GARANTIA: </b><?php echo dateInterval($result->dataFinal, $result->garantia); ?><?php } ?>
+                                                <b><?php if ($result->status == 'Finalizado') { ?> VENC. DA GARANTIA: </b><?= dateInterval($result->dataFinal, $result->garantia) ?><?php } ?>
                                             </td>
                                         </tr>
                                     <?php } ?>
@@ -80,7 +80,7 @@
                                         <tr>
                                             <td>
                                                 <strong>DESCRIÇÃO: </strong><br>
-                                                <?php echo printSafeHtml($result->descricaoProduto) ?>
+                                                <?= printSafeHtml($result->descricaoProduto) ?>
                                             </td>
                                         </tr>
 
@@ -90,7 +90,7 @@
                                         <tr>
                                             <td>
                                                 <strong>DEFEITO APRESENTADO: </strong><br>
-                                                <?php echo printSafeHtml($result->defeito) ?>
+                                                <?= printSafeHtml($result->defeito) ?>
                                             </td>
                                         </tr>
                                     <?php } ?>
@@ -99,7 +99,7 @@
                                         <tr>
                                             <td>
                                                 <strong>OBSERVAÇÕES: </strong><br>
-                                                <?php echo printSafeHtml($result->observacoes) ?>
+                                                <?= printSafeHtml($result->observacoes) ?>
                                             </td>
                                         </tr>
                                     <?php } ?>
@@ -108,7 +108,7 @@
                                         <tr>
                                             <td>
                                                 <strong>LAUDO TÉCNICO: </strong><br>
-                                                <?php echo printSafeHtml($result->laudoTecnico) ?>
+                                                <?= printSafeHtml($result->laudoTecnico) ?>
                                             </td>
                                         </tr>
                                     <?php } ?>
@@ -117,7 +117,7 @@
                                         <tr>
                                             <td>
                                                 <strong>TERMO DE GARANTIA </strong><br>
-                                                <?php echo printSafeHtml($result->textoGarantia) ?>
+                                                <?= printSafeHtml($result->textoGarantia) ?>
                                             </td>
                                         </tr>
                                     <?php } ?>
@@ -174,7 +174,7 @@
                                     <tr>
                                         <td></td>
                                         <td colspan="2" style="text-align: right"><strong>TOTAL:</strong></td>
-                                        <td><strong>R$ <?php echo number_format($totalProdutos, 2, ',', '.'); ?></strong>
+                                        <td><strong>R$ <?= number_format($totalProdutos, 2, ',', '.') ?></strong>
                                         </td>
                                     </tr>
                                 </tbody>
@@ -206,7 +206,7 @@
                             } ?>
                                     <tr>
                                         <td colspan="3" style="text-align: right"><strong>TOTAL:</strong></td>
-                                        <td><strong>R$ <?php echo number_format($totalServico, 2, ',', '.'); ?></strong>
+                                        <td><strong>R$ <?= number_format($totalServico, 2, ',', '.') ?></strong>
                                         </td>
                                     </tr>
                                 </tbody>
@@ -230,9 +230,9 @@
                                 <?php if ($result->status == 'Finalizado' || $result->status == 'Aprovado') { ?>
                                     <?php if ($qrCode) : ?>
                                         <td style="width: 15%; padding-left: 0; text-align:center;">
-                                            <img style="margin:0px" src="<?php echo base_url(); ?>assets/img/logo_pix.png" width="48px" alt="QR Code de Pagamento" /></br>
-                                            <img style="margin:6px 0px 0px 0px" width="94px" src="<?= $qrCode ?>" alt="QR Code de Pagamento" /></br>
-                                            <?php echo '<span style="margin:0px;font-size: 80%;text-align:center;">Chave PIX: ' . $chaveFormatada . '</span>';?>
+                                            <img style="margin:0px" src="<?= base_url() ?>assets/img/logo_pix.png" width="48px" alt="QR Code de Pagamento" /></br>
+                                            <img style="margin:6px 0px 0px 0px" width="94px" src="<?= esc($qrCode) ?>" alt="QR Code de Pagamento" /></br>
+                                            <?= '<span style="margin:0px;font-size: 80%;text-align:center;">Chave PIX: ' . esc($chaveFormatada) . '</span>' ?>
                                         </td>
                                     <?php endif ?>
                                 <?php } ?>
@@ -269,9 +269,9 @@
             event.preventDefault();
             var link = $(this).attr('link');
             var id = $(this).attr('imagem');
-            var url = '<?php echo base_url(); ?>index.php/os/excluirAnexo/';
+            var url = '<?= base_url() ?>index.php/os/excluirAnexo/';
             $("#div-visualizar-anexo").html('<img src="' + link + '" alt="">');
-            $("#download").attr('href', "<?php echo base_url(); ?>index.php/os/downloadanexo/" + id);
+            $("#download").attr('href', "<?= base_url() ?>index.php/os/downloadanexo/" + id);
         });
     });
 </script>
@@ -300,10 +300,10 @@ function Popup(data) {
             }
 
             mywindow.document.write('<html><head><title>Map Os</title>');
-            mywindow.document.write("<link rel='stylesheet' href='<?php echo base_url(); ?>assets/css/bootstrap.min.css' />");
-            mywindow.document.write("<link rel='stylesheet' href='<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css' />");
-            mywindow.document.write("<link rel='stylesheet' href='<?php echo base_url(); ?>assets/css/matrix-style.css' />");
-            mywindow.document.write("<link rel='stylesheet' href='<?php echo base_url(); ?>assets/css/matrix-media.css' />");
+            mywindow.document.write("<link rel='stylesheet' href='<?= base_url() ?>assets/css/bootstrap.min.css' />");
+            mywindow.document.write("<link rel='stylesheet' href='<?= base_url() ?>assets/css/bootstrap-responsive.min.css' />");
+            mywindow.document.write("<link rel='stylesheet' href='<?= base_url() ?>assets/css/matrix-style.css' />");
+            mywindow.document.write("<link rel='stylesheet' href='<?= base_url() ?>assets/css/matrix-media.css' />");
 
             mywindow.document.write("</head><body >");
             mywindow.document.write(data);
diff --git a/application/views/emails/emails.php b/application/views/emails/emails.php
index d0761238e..6f4d0c7e1 100644
--- a/application/views/emails/emails.php
+++ b/application/views/emails/emails.php
@@ -45,7 +45,7 @@
         </table>
     </div>
 </div>
-<?php echo $this->pagination->create_links(); ?>
+<?= $this->pagination->create_links() ?>
 <!-- Modal -->
 <div id="modal-excluir" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
     <form action="<?= site_url('mapos/excluirEmail') ?>" method="post">
diff --git a/application/views/errors/cli/error_exception.php b/application/views/errors/cli/error_exception.php
index 563517b3b..81a776ba4 100644
--- a/application/views/errors/cli/error_exception.php
+++ b/application/views/errors/cli/error_exception.php
@@ -2,19 +2,19 @@
 
 An uncaught Exception was encountered
 
-Type:        <?php echo get_class($exception), "\n"; ?>
-Message:     <?php echo $message, "\n"; ?>
-Filename:    <?php echo $exception->getFile(), "\n"; ?>
-Line Number: <?php echo $exception->getLine(); ?>
+Type:        <?= get_class($exception), "\n" ?>
+Message:     <?= $message, "\n" ?>
+Filename:    <?= $exception->getFile(), "\n" ?>
+Line Number: <?= $exception->getLine() ?>
 
 <?php if (defined('SHOW_DEBUG_BACKTRACE') && SHOW_DEBUG_BACKTRACE === true) : ?>
 
 Backtrace:
 <?php	foreach ($exception->getTrace() as $error) : ?>
 <?php	  if (isset($error['file']) && strpos($error['file'], realpath(BASEPATH)) !== 0) : ?>
-	File: <?php echo $error['file'], "\n"; ?>
-	Line: <?php echo $error['line'], "\n"; ?>
-	Function: <?php echo $error['function'], "\n\n"; ?>
+	File: <?= $error['file'], "\n" ?>
+	Line: <?= $error['line'], "\n" ?>
+	Function: <?= $error['function'], "\n\n" ?>
 <?php	  endif ?>
 <?php	endforeach ?>
 
diff --git a/application/views/errors/cli/error_php.php b/application/views/errors/cli/error_php.php
index 74711eb7d..7f9ef0791 100644
--- a/application/views/errors/cli/error_php.php
+++ b/application/views/errors/cli/error_php.php
@@ -2,19 +2,19 @@
 
 A PHP Error was encountered
 
-Severity:    <?php echo $severity, "\n"; ?>
-Message:     <?php echo $message, "\n"; ?>
-Filename:    <?php echo $filepath, "\n"; ?>
-Line Number: <?php echo $line; ?>
+Severity:    <?= $severity, "\n" ?>
+Message:     <?= $message, "\n" ?>
+Filename:    <?= $filepath, "\n" ?>
+Line Number: <?= esc($line) ?>
 
 <?php if (defined('SHOW_DEBUG_BACKTRACE') && SHOW_DEBUG_BACKTRACE === true) : ?>
 
 Backtrace:
 <?php	foreach (debug_backtrace() as $error) : ?>
 <?php	  if (isset($error['file']) && strpos($error['file'], realpath(BASEPATH)) !== 0) : ?>
-	File: <?php echo $error['file'], "\n"; ?>
-	Line: <?php echo $error['line'], "\n"; ?>
-	Function: <?php echo $error['function'], "\n\n"; ?>
+	File: <?= $error['file'], "\n" ?>
+	Line: <?= $error['line'], "\n" ?>
+	Function: <?= $error['function'], "\n\n" ?>
 <?php	  endif ?>
 <?php	endforeach ?>
 
diff --git a/application/views/errors/html/error_404.php b/application/views/errors/html/error_404.php
index 20e1dfde5..58fb2f046 100644
--- a/application/views/errors/html/error_404.php
+++ b/application/views/errors/html/error_404.php
@@ -57,8 +57,8 @@
 </head>
 <body>
 	<div id="container">
-		<h1><?php echo $heading; ?></h1>
-		<?php echo $message; ?>
+		<h1><?= esc($heading) ?></h1>
+		<?= esc($message) ?>
 	</div>
 </body>
 </html>
\ No newline at end of file
diff --git a/application/views/errors/html/error_db.php b/application/views/errors/html/error_db.php
index e410c984b..d1077f93a 100644
--- a/application/views/errors/html/error_db.php
+++ b/application/views/errors/html/error_db.php
@@ -57,8 +57,8 @@
 </head>
 <body>
 	<div id="container">
-		<h1><?php echo $heading; ?></h1>
-		<?php echo $message; ?>
+		<h1><?= esc($heading) ?></h1>
+		<?= esc($message) ?>
 	</div>
 </body>
 </html>
\ No newline at end of file
diff --git a/application/views/errors/html/error_exception.php b/application/views/errors/html/error_exception.php
index d332a4618..94fcee022 100644
--- a/application/views/errors/html/error_exception.php
+++ b/application/views/errors/html/error_exception.php
@@ -6,10 +6,10 @@
 
 <h4>An uncaught Exception was encountered</h4>
 
-<p>Type: <?php echo get_class($exception); ?></p>
-<p>Message: <?php echo $message; ?></p>
-<p>Filename: <?php echo $exception->getFile(); ?></p>
-<p>Line Number: <?php echo $exception->getLine(); ?></p>
+<p>Type: <?= get_class($exception) ?></p>
+<p>Message: <?= esc($message) ?></p>
+<p>Filename: <?= $exception->getFile() ?></p>
+<p>Line Number: <?= $exception->getLine() ?></p>
 
 <?php if (defined('SHOW_DEBUG_BACKTRACE') && SHOW_DEBUG_BACKTRACE === true) : ?>
 
@@ -19,9 +19,9 @@
 		<?php if (isset($error['file']) && strpos($error['file'], realpath(BASEPATH)) !== 0) : ?>
 
 			<p style="margin-left:10px">
-			File: <?php echo $error['file']; ?><br />
-			Line: <?php echo $error['line']; ?><br />
-			Function: <?php echo $error['function']; ?>
+			File: <?= esc($error['file']) ?><br />
+			Line: <?= esc($error['line']) ?><br />
+			Function: <?= $error['function'] ?>
 			</p>
 		<?php endif ?>
 
diff --git a/application/views/errors/html/error_general.php b/application/views/errors/html/error_general.php
index f4f4f69ef..f678e1415 100644
--- a/application/views/errors/html/error_general.php
+++ b/application/views/errors/html/error_general.php
@@ -57,8 +57,8 @@
 </head>
 <body>
 	<div id="container">
-		<h1><?php echo $heading; ?></h1>
-		<?php echo $message; ?>
+		<h1><?= esc($heading) ?></h1>
+		<?= esc($message) ?>
 	</div>
 </body>
 </html>
\ No newline at end of file
diff --git a/application/views/errors/html/error_php.php b/application/views/errors/html/error_php.php
index def40c9a4..1dd5c303e 100644
--- a/application/views/errors/html/error_php.php
+++ b/application/views/errors/html/error_php.php
@@ -6,10 +6,10 @@
 
 <h4>A PHP Error was encountered</h4>
 
-<p>Severity: <?php echo $severity; ?></p>
-<p>Message:  <?php echo $message; ?></p>
-<p>Filename: <?php echo $filepath; ?></p>
-<p>Line Number: <?php echo $line; ?></p>
+<p>Severity: <?= esc($severity) ?></p>
+<p>Message:  <?= esc($message) ?></p>
+<p>Filename: <?= esc($filepath) ?></p>
+<p>Line Number: <?= esc($line) ?></p>
 
 <?php if (defined('SHOW_DEBUG_BACKTRACE') && SHOW_DEBUG_BACKTRACE === true) : ?>
 
@@ -19,9 +19,9 @@
 		<?php if (isset($error['file']) && strpos($error['file'], realpath(BASEPATH)) !== 0) : ?>
 
 			<p style="margin-left:10px">
-			File: <?php echo $error['file'] ?><br />
-			Line: <?php echo $error['line'] ?><br />
-			Function: <?php echo $error['function'] ?>
+			File: <?= esc($error['file']) ?><br />
+			Line: <?= esc($error['line']) ?><br />
+			Function: <?= $error['function'] ?>
 			</p>
 
 		<?php endif ?>
diff --git a/application/views/financeiro/lancamentos.php b/application/views/financeiro/lancamentos.php
index 731cbc9e8..5a02d4069 100644
--- a/application/views/financeiro/lancamentos.php
+++ b/application/views/financeiro/lancamentos.php
@@ -1,7 +1,7 @@
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
-<script src="<?php echo base_url() ?>assets/js/sweetalert2.all.min.js"></script>
-<script src="<?php echo base_url() ?>assets/js/dayjs.min.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
+<script src="<?= base_url() ?>assets/js/sweetalert2.all.min.js"></script>
+<script src="<?= base_url() ?>assets/js/dayjs.min.js"></script>
 
 <?php $situacao = $this->input->get('situacao');
 $periodo = $this->input->get('periodo');
@@ -40,7 +40,7 @@
     <?php } ?>
 
     <div class="span12" style="margin-left: 0;margin-top: 1rem;">
-        <form action="<?php echo current_url(); ?>" method="get">
+        <form action="<?= current_url() ?>" method="get">
             <div class="span2" style="margin-left: 0">
                 <label>Período</label>
                 <select id="periodo" name="periodo" class="span12">
@@ -175,19 +175,19 @@
                         <tr>
                             <td colspan="6" style="text-align: right; color: green"><strong>Total Receitas:</strong></td>
                             <td colspan="6" style="text-align: left; color: green">
-                                <strong>R$ <?php echo number_format($totals['receitas'], 2, ',', '.') ?></strong>
+                                <strong>R$ <?= number_format($totals['receitas'], 2, ',', '.') ?></strong>
                             </td>
                         </tr>
                         <tr>
                             <td colspan="6" style="text-align: right; color: red"><strong>Total Despesas:</strong></td>
                             <td colspan="6" style="text-align: left; color: red">
-                                <strong>R$ <?php echo number_format($totals['despesas'], 2, ',', '.') ?></strong>
+                                <strong>R$ <?= number_format($totals['despesas'], 2, ',', '.') ?></strong>
                             </td>
                         </tr>
                         <tr>
                             <td colspan="6" style="text-align: right"><strong>Saldo:</strong></td>
                             <td colspan="6" style="text-align: left;">
-                                <strong>R$ <?php echo number_format($totals['receitas'] - $totals['despesas'], 2, ',', '.') ?></strong>
+                                <strong>R$ <?= number_format($totals['receitas'] - $totals['despesas'], 2, ',', '.') ?></strong>
                             </td>
                         </tr>
                     
@@ -195,10 +195,10 @@
                             <td colspan="7" style="text-align: left;"><strong>Estatísticas Gerais do Financeiro:</strong></td>
                         </tr> 
                         <tr>
-                      <td colspan="7" style="text-align: left; color: green">Total Receitas (Pagas): R$ <?php echo number_format($estatisticas_financeiro->total_receita, 2, ',', '.'); ?></td>
+                      <td colspan="7" style="text-align: left; color: green">Total Receitas (Pagas): R$ <?= number_format($estatisticas_financeiro->total_receita, 2, ',', '.') ?></td>
                       </tr>
                       <tr>
-                      <td colspan="7" style="text-align: left; color: red">Total Despesas (Pagas): R$ <?php echo number_format($estatisticas_financeiro->total_despesa, 2, ',', '.'); ?></td>
+                      <td colspan="7" style="text-align: left; color: red">Total Despesas (Pagas): R$ <?= number_format($estatisticas_financeiro->total_despesa, 2, ',', '.') ?></td>
                       </tr>
                       <tr>
                       <td colspan="7" style="text-align: left;"><strong>Total Receitas (-) Despesas = Saldo Líquido: R$ <?php $sub_receita_despesa = $estatisticas_financeiro->total_receita - $estatisticas_financeiro->total_despesa;
@@ -212,7 +212,7 @@
                       <td colspan="7" style="text-align: left;">Total Receitas Pendentes: R$ <?php  echo number_format($estatisticas_financeiro->total_receita_pendente, 2, ',', '.'); ?></td>
                       </tr>
                       <tr>
-                      <td colspan="7" style="text-align: left;">Total Despesas Pendentes: R$ <?php echo number_format($estatisticas_financeiro->total_despesa_pendente, 2, ',', '.'); ?></td>
+                      <td colspan="7" style="text-align: left;">Total Despesas Pendentes: R$ <?= number_format($estatisticas_financeiro->total_despesa_pendente, 2, ',', '.') ?></td>
                       </tr>
                       <tr>
                       <td colspan="7" style="text-align: left;">Total de Receitas Pendentes (-) Despesas Pendentes: R$ <?php $sub_recpendente_despependente = $estatisticas_financeiro->total_receita_pendente - $estatisticas_financeiro->total_despesa_pendente;
@@ -223,20 +223,20 @@
 echo number_format($sub_recpendente_despependente, 2, ',', '.')?></strong></td>
                       </tr>
                       <tr>
-                      <td colspan="7" style="text-align: left;">Total de Descontos aplicados á lançamentos Pagos: R$ <?php echo number_format($estatisticas_financeiro->total_valor_desconto, 2, ',', '.'); ?></td>
+                      <td colspan="7" style="text-align: left;">Total de Descontos aplicados á lançamentos Pagos: R$ <?= number_format($estatisticas_financeiro->total_valor_desconto, 2, ',', '.') ?></td>
                       </tr>
                       <tr>
-                      <td colspan="7" style="text-align: left;">Total de Descontos aplicados á lançamentos Pendentes: R$ <?php echo number_format($estatisticas_financeiro->total_valor_desconto_pendente, 2, ',', '.'); ?></td>
+                      <td colspan="7" style="text-align: left;">Total de Descontos aplicados á lançamentos Pendentes: R$ <?= number_format($estatisticas_financeiro->total_valor_desconto_pendente, 2, ',', '.') ?></td>
                       </tr>
                       <tr>
                       <td colspan="7" style="text-align: left;"><strong>Total de descontos aplicados (pagos + pendentes): R$ <?php $soma_descontos_pagos = $estatisticas_financeiro->total_valor_desconto + $estatisticas_financeiro->total_valor_desconto_pendente;
 echo number_format($soma_descontos_pagos, 2, ',', '.')?></strong></td>
                       </tr>
                       <tr>
-                      <td colspan="7" style="text-align: left;">Total de Receitas sem descontos aplicados (pagos + pendentes): R$ <?php echo number_format($estatisticas_financeiro->total_receita_sem_desconto, 2, ',', '.'); ?></td>
+                      <td colspan="7" style="text-align: left;">Total de Receitas sem descontos aplicados (pagos + pendentes): R$ <?= number_format($estatisticas_financeiro->total_receita_sem_desconto, 2, ',', '.') ?></td>
                       </tr>
                       <tr>
-                      <td colspan="7" style="text-align: left;">Total de Despesas sem descontos aplicados (pagos + pendentes): R$ <?php echo number_format($estatisticas_financeiro->total_despesa_sem_desconto, 2, ',', '.'); ?></td>
+                      <td colspan="7" style="text-align: left;">Total de Despesas sem descontos aplicados (pagos + pendentes): R$ <?= number_format($estatisticas_financeiro->total_despesa_sem_desconto, 2, ',', '.') ?></td>
                       </tr>
                     </tfoot>
                 </table>
@@ -244,12 +244,12 @@
         </div>
     </div>
 
-    <?php echo $this->pagination->create_links(); ?>
+    <?= $this->pagination->create_links() ?>
 </div>
 
 <!-- Modal nova receita e despesa -->
 <div id="modalReceita" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form id="formReceita" action="<?php echo base_url() ?>index.php/financeiro/adicionarReceita" method="post">
+    <form id="formReceita" action="<?= base_url() ?>index.php/financeiro/adicionarReceita" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h3 id="myModalLabel">Adicionar Receita/Despesa</h3>
@@ -271,7 +271,7 @@
             <div class="span6" style="margin-left: 0">
                 <label for="descricao">Descrição/Referência*</label>
                 <input class="span12" id="descricao" type="text" name="descricao" required />
-                <input id="urlAtual" type="hidden" name="urlAtual" value="<?php echo current_url() ?>" />
+                <input id="urlAtual" type="hidden" name="urlAtual" value="<?= current_url() ?>" />
             </div>
             <div class="span12" style="margin-left: 0">
                 <div class="span12" style="margin-left: 0">
@@ -300,7 +300,7 @@
 		            
           <div class="span3">  
           <label for="valor_desconto">Val.Desc <i class="icon-info-sign tip-left" title="Não altere esta campo, caso clicar nele e sair e ficar vázio, terá que recarregar á pagina e inserir de novo"></i></label>
-          <input class="span12 money" id="valor_desconto" readOnly="true" title="Não altere este campo" type="text" name="valor_desconto" value="<?php echo number_format("0.00", 2, ',', '.') ?>"/>
+          <input class="span12 money" id="valor_desconto" readOnly="true" title="Não altere este campo" type="text" name="valor_desconto" value="<?= number_format("0.00", 2, ',', '.') ?>"/>
         </div>
 
                 <div class="span4" style="margin-left: 0">
@@ -371,7 +371,7 @@
 
 <!-- Modal nova receita e despesa parcelada -->
 <div id="modalReceitaParcelada" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-  <form id="formReceita_parc" action="<?php echo base_url() ?>index.php/financeiro/adicionarReceita_parc" method="post">
+  <form id="formReceita_parc" action="<?= base_url() ?>index.php/financeiro/adicionarReceita_parc" method="post">
   <div class="modal-header">
     <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
     <h3 id="myModalLabel">Adicionar Receita/Despesa Parcelada</h3>
@@ -388,7 +388,7 @@
           <div class="span6" style="margin-left: 0"> 
     		<label for="descricao_parc">Descrição/Referência*</label>
     		<input class="span12" id="descricao_parc" type="text" name="descricao_parc" required />
-    		<input id="urlAtual" type="hidden" name="urlAtual" value="<?php echo current_url() ?>"/>
+    		<input id="urlAtual" type="hidden" name="urlAtual" value="<?= current_url() ?>"/>
     	</div>	
     	        
     		<div class="span6" style="margin-left: 0"> 
@@ -416,7 +416,7 @@
 		         
           <div class="span3" style="margin-left: 0">  
 	        <label for="desconto_parc">Desconto <i class="icon-info-sign tip-left" title="Não altere esta campo, caso clicar nele e sair e ficar vázio, terá que recarregar á pagina e inserir de novo"></i></label>
-            <input class="span6 money"  id="desconto_parc" readOnly="true" title="Não altere este campo" type="text" name="desconto_parc" value="<?php echo number_format("0.00", 2, ',', '.') ?>" style="float: left;" />
+            <input class="span6 money"  id="desconto_parc" readOnly="true" title="Não altere este campo" type="text" name="desconto_parc" value="<?= number_format("0.00", 2, ',', '.') ?>" style="float: left;" />
 	      </div>
 			
     		<div id="divParcelamento" class="span2" style="margin-left: 0">
@@ -463,7 +463,7 @@
 
 	    	<div class="span4" style="margin-left: 1">
 	    		<label for="dia_pgto">Data da Entrada*</label>
-	    		<input class="span12 datepicker" id="dia_pgto" type="text" name="dia_pgto" value="<?php echo date('d/m/Y'); ?>"  autocomplete="off"  required/>
+	    		<input class="span12 datepicker" id="dia_pgto" type="text" name="dia_pgto" value="<?= date('d/m/Y') ?>"  autocomplete="off"  required/>
 	    	</div>
 	    	
 	    	<div class="span4" style="margin-left: 1">
@@ -568,7 +568,7 @@
 
 <!-- Modal editar lançamento -->
 <div id="modalEditar" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form id="formEditar" action="<?php echo base_url() ?>index.php/financeiro/editar" method="post">
+    <form id="formEditar" action="<?= base_url() ?>index.php/financeiro/editar" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h3 id="myModalLabel">Editar Lançamento</h3>
@@ -597,7 +597,7 @@
                 <div class="span4" style="margin-left: 0">
                     <label for="valor">Valor*</label>
                     <input type="hidden" id="idEditar" name="id" value="" />
-                    <input class="span12 money" type="text" name="valor" id="valorEditar" value="<?php echo number_format("0.00", 2, ',', '.') ?>" required />
+                    <input class="span12 money" type="text" name="valor" id="valorEditar" value="<?= number_format("0.00", 2, ',', '.') ?>" required />
                 </div>
 
         <div class="span4">  
@@ -608,7 +608,7 @@
 
             <div class="span2">  
             <label for="valor_desconto">Val.Desc</label>
-            <input class="span12 money" id="descontoEditar" name="valor_desconto_editar" type="text" value="<?php echo number_format("0.00", 2, ',', '.') ?>" />
+            <input class="span12 money" id="descontoEditar" name="valor_desconto_editar" type="text" value="<?= number_format("0.00", 2, ',', '.') ?>" />
             </div>
 
                 <div class="span4" style="margin-left: 0">
@@ -685,8 +685,8 @@
     </div>
 </div>
 
-<script src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
-<script src="<?php echo base_url(); ?>assets/js/maskmoney.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
+<script src="<?= base_url() ?>assets/js/maskmoney.js"></script>
 <script type="text/javascript">
 
     function mostrarValor() {
@@ -910,7 +910,7 @@ function mostrarValoresParc() {
 
             $.ajax({
                 type: "POST",
-                url: "<?php echo base_url(); ?>index.php/financeiro/excluirLancamento",
+                url: "<?= base_url() ?>index.php/financeiro/excluirLancamento",
                 data: "id=" + id,
                 dataType: 'json',
                 success: function(data) {
@@ -931,7 +931,7 @@ function mostrarValoresParc() {
             });
             return false;
         });
-        let controlBaixa = "<?php echo $configuration['control_baixa']; ?>";
+        let controlBaixa = <?= esc_js($configuration['control_baixa']) ?>;
         let datePickerOptions = {
             dateFormat: 'dd/mm/yy',
         };
@@ -989,7 +989,7 @@ function mostrarValoresParc() {
         });
 
         $("#fornecedorEditar").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/financeiro/autoCompleteClienteAddReceita",
+            source: "<?= base_url() ?>index.php/financeiro/autoCompleteClienteAddReceita",
             minLength: 1,
             select: function(event, ui) {
                 $("#fornecedorEditar").val(ui.item.label);
@@ -997,7 +997,7 @@ function mostrarValoresParc() {
         });
     
         $("#cliente").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/financeiro/autoCompleteClienteAddReceita",
+            source: "<?= base_url() ?>index.php/financeiro/autoCompleteClienteAddReceita",
             minLength: 1,
             select: function(event, ui) {
                 $("#cliente").val(ui.item.label);
@@ -1006,7 +1006,7 @@ function mostrarValoresParc() {
         });
 
           $("#cliente_busca").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/financeiro/autoCompleteClienteAddReceita",
+            source: "<?= base_url() ?>index.php/financeiro/autoCompleteClienteAddReceita",
             minLength: 1,
             select: function(event, ui) {
                 $("#cliente_busca").val(ui.item.label);
@@ -1014,7 +1014,7 @@ function mostrarValoresParc() {
         });
 
         $("#cliente_parc").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/financeiro/autoCompleteClienteAddReceita",
+            source: "<?= base_url() ?>index.php/financeiro/autoCompleteClienteAddReceita",
             minLength: 1,
             select: function(event, ui) {
                 $("#cliente_parc").val(ui.item.label);
@@ -1023,7 +1023,7 @@ function mostrarValoresParc() {
         });
 
         $("#fornecedor").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/financeiro/autoCompleteClienteAddReceita",
+            source: "<?= base_url() ?>index.php/financeiro/autoCompleteClienteAddReceita",
             minLength: 1,
             select: function(event, ui) {
                 $("#fornecedor").val(ui.item.label);
diff --git a/application/views/garantias/adicionarGarantia.php b/application/views/garantias/adicionarGarantia.php
index 817c21c49..ac74377f3 100644
--- a/application/views/garantias/adicionarGarantia.php
+++ b/application/views/garantias/adicionarGarantia.php
@@ -1,10 +1,10 @@
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
 
-<link rel="stylesheet" href="<?php echo base_url() ?>assets/trumbowyg/ui/trumbowyg.css">
-<script type="text/javascript" src="<?php echo base_url() ?>assets/trumbowyg/trumbowyg.js"></script>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/trumbowyg/langs/pt_br.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/trumbowyg/ui/trumbowyg.css">
+<script type="text/javascript" src="<?= base_url() ?>assets/trumbowyg/trumbowyg.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/trumbowyg/langs/pt_br.js"></script>
 
 <div class="row-fluid" style="margin-top:0">
     <div class="span12">
@@ -21,15 +21,15 @@
                     <div class="span12 alert alert-danger" id="divInfo" style="padding: 1%;">Dados incompletos, verifique os campos com asterisco.</div>
                 <?php
                 } ?>
-                <form action="<?php echo current_url(); ?>" method="post" id="formGarantia">
+                <form action="<?= current_url() ?>" method="post" id="formGarantia">
                     <div class="span12">
                         <div class="span2">
                             <label for="dataGarantia">Data<span class="required">*</span></label>
-                            <input id="dataGarantia" class="span12 datepicker" type="text" name="dataGarantia" value="<?php echo date('d/m/Y'); ?>" disabled />
+                            <input id="dataGarantia" class="span12 datepicker" type="text" name="dataGarantia" value="<?= date('d/m/Y') ?>" disabled />
                         </div>
                         <div class="span3">
                             <label for="usuarios_id">Responsável<span class="required">*</span></label>
-                            <input id="usuarios_id" class="span12" type="text" name="usuarios_id" value="<?php echo $this->session->userdata('nome_admin') ?>" disabled />
+                            <input id="usuarios_id" class="span12" type="text" name="usuarios_id" value="<?= esc($this->session->userdata('nome_admin')) ?>" disabled />
                         </div>
                         <div class="span7">
                             <label for="refGarantia">Ref Garantia<span class="required">*</span></label>
@@ -46,7 +46,7 @@
                         <div class="span6 offset3" style="display:flex;justify-content: center">
                             <button class="button btn btn-success" id="btnContinuar">
                               <span class="button__icon"><i class='bx bx-plus-circle'></i></span><span class="button__text2">Adicionar</span></button>
-                            <a href="<?php echo base_url() ?>index.php/garantias" class="button btn btn-mini btn-warning">
+                            <a href="<?= base_url() ?>index.php/garantias" class="button btn btn-mini btn-warning">
                               <span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
                         </div>
                     </div>
@@ -59,14 +59,14 @@
 <script type="text/javascript">
     $(document).ready(function() {
         $("#cliente").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/garantias/autoCompleteCliente",
+            source: "<?= base_url() ?>index.php/garantias/autoCompleteCliente",
             minLength: 1,
             select: function(event, ui) {
                 $("#clientes_id").val(ui.item.id);
             }
         });
         $("#tecnico").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/garantias/autoCompleteUsuario",
+            source: "<?= base_url() ?>index.php/garantias/autoCompleteUsuario",
             minLength: 1,
             select: function(event, ui) {
                 $("#usuarios_id").val(ui.item.id);
diff --git a/application/views/garantias/editarGarantia.php b/application/views/garantias/editarGarantia.php
index 098fb3718..b77963b76 100644
--- a/application/views/garantias/editarGarantia.php
+++ b/application/views/garantias/editarGarantia.php
@@ -1,10 +1,10 @@
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
 
-<link rel="stylesheet" href="<?php echo base_url() ?>assets/trumbowyg/ui/trumbowyg.css">
-<script type="text/javascript" src="<?php echo base_url() ?>assets/trumbowyg/trumbowyg.js"></script>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/trumbowyg/langs/pt_br.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/trumbowyg/ui/trumbowyg.css">
+<script type="text/javascript" src="<?= base_url() ?>assets/trumbowyg/trumbowyg.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/trumbowyg/langs/pt_br.js"></script>
 
 <div class="row-fluid" style="margin-top:0">
     <div class="span12">
@@ -21,35 +21,35 @@
                     <div class="span12 alert alert-danger" id="divInfo" style="padding: 1%;">Dados incompletos, verifique os campos com asterisco ou se selecionou corretamente cliente e responsável.</div>
                 <?php  } ?>
 
-                <form action="<?php echo current_url(); ?>" method="post" id="formGarantia">
+                <form action="<?= current_url() ?>" method="post" id="formGarantia">
 
                     <div class="span12">
                         <div class="span2">
                             <label for="dataGarantia">Data</label>
-                            <?php echo form_hidden('idGarantias', $result->idGarantias) ?>
-                            <input id="dataGarantia" class="span12 datepicker" type="text" name="dataGarantia" value="<?php echo date('d/m/Y', strtotime($result->dataGarantia)); ?>" disabled />
+                            <?= form_hidden('idGarantias', $result->idGarantias) ?>
+                            <input id="dataGarantia" class="span12 datepicker" type="text" name="dataGarantia" value="<?= date('d/m/Y', strtotime($result->dataGarantia)) ?>" disabled />
                         </div>
                         <div class="span5">
                             <label for="usuarios_id">Responsável</label>
-                            <input id="usuarios_id" class="span12" type="text" name="usuarios_id" value="<?php echo $result->nome ?>" disabled />
+                            <input id="usuarios_id" class="span12" type="text" name="usuarios_id" value="<?= esc($result->nome) ?>" disabled />
 
                         </div>
                         <div class="span5">
                             <label for="refGarantia">Ref. Garantia</label>
-                            <input id="refGarantia" class="span12" type="text" name="refGarantia" value="<?php echo $result->refGarantia ?>" />
+                            <input id="refGarantia" class="span12" type="text" name="refGarantia" value="<?= esc($result->refGarantia) ?>" />
                         </div>
                         <div class="span12" style="margin-left: 0">
                             <label for="textoGarantia">
                                 <h4 class="text-center">Termo de Garantia</h4>
                             </label>
-                            <textarea required class="span10 editor" name="textoGarantia" id="textoGarantia" cols="30" rows="5"><?php echo $result->textoGarantia ?></textarea>
+                            <textarea required class="span10 editor" name="textoGarantia" id="textoGarantia" cols="30" rows="5"><?= esc($result->textoGarantia) ?></textarea>
                         </div>
                     </div>
 
                     <div class="span12" style="padding: 1%; margin-left: 0">
                         <div class="span6 offset5" style="display:flex;justify-content: center">
                             <button type="submit" class="button btn btn-primary"><span class="button__icon"><i class="bx bx-sync"></i></span><span class="button__text2">Atualizar</span></button>
-                            <a href="<?php echo base_url() ?>index.php/garantias" id="" class="button btn btn-mini btn-warning"><span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
+                            <a href="<?= base_url() ?>index.php/garantias" id="" class="button btn btn-mini btn-warning"><span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
                         </div>
                     </div>
                 </form>
@@ -61,14 +61,14 @@
 <script type="text/javascript">
     $(document).ready(function() {
         $("#cliente").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/garantias/autoCompleteCliente",
+            source: "<?= base_url() ?>index.php/garantias/autoCompleteCliente",
             minLength: 1,
             select: function(event, ui) {
                 $("#clientes_id").val(ui.item.id);
             }
         });
         $("#tecnico").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/garantias/autoCompleteUsuario",
+            source: "<?= base_url() ?>index.php/garantias/autoCompleteUsuario",
             minLength: 1,
             select: function(event, ui) {
                 $("#usuarios_id").val(ui.item.id);
diff --git a/application/views/garantias/garantias.php b/application/views/garantias/garantias.php
index 176b046ef..bde3d376b 100644
--- a/application/views/garantias/garantias.php
+++ b/application/views/garantias/garantias.php
@@ -11,7 +11,7 @@
         <h5>Termo de Garantia</h5>
     </div>
     <?php if ($this->permission->checkPermission($this->session->userdata('permissao'), 'aGarantia')) { ?>
-    <a href="<?php echo base_url(); ?>index.php/garantias/adicionar" class="button btn btn-mini btn-success" style="max-width: 160px">
+    <a href="<?= base_url() ?>index.php/garantias/adicionar" class="button btn btn-mini btn-success" style="max-width: 160px">
       <span class="button__icon"><i class='bx bx-plus-circle'></i></span><span class="button__text2">Termo Garantia</span></a>
 <?php } ?>
 
@@ -64,11 +64,11 @@
     </div>
 </div>
 </div>
-<?php echo $this->pagination->create_links(); ?>
+<?= $this->pagination->create_links() ?>
 
 <!-- Modal -->
 <div id="modal-excluir" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form action="<?php echo base_url() ?>index.php/garantias/excluir" method="post">
+    <form action="<?= base_url() ?>index.php/garantias/excluir" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h5 id="myModalLabel">Excluir Termo de Garantia</h5>
diff --git a/application/views/garantias/imprimirGarantia.php b/application/views/garantias/imprimirGarantia.php
index 31bbd1443..53ff8cbb8 100644
--- a/application/views/garantias/imprimirGarantia.php
+++ b/application/views/garantias/imprimirGarantia.php
@@ -5,9 +5,9 @@
     <title>Map OS</title>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/matrix-style.css" />
-    <link href="<?php echo base_url(); ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/matrix-style.css" />
+    <link href="<?= base_url() ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
     <link href="<?= base_url('assets/css/custom.css'); ?>" rel="stylesheet">
     <link href='http://fonts.googleapis.com/css?family=Open+Sans:400,700,800' rel='stylesheet' type='text/css'>
     <style>
@@ -84,22 +84,22 @@
                                 <tbody>
                                     <?php if ($emitente == null) { ?>
                                         <tr>
-                                            <td colspan="3" class="alert">Você precisa configurar os dados do emitente. >>><a href="<?php echo base_url(); ?>index.php/mapos/emitente">Configurar</a>
+                                            <td colspan="3" class="alert">Você precisa configurar os dados do emitente. >>><a href="<?= base_url() ?>index.php/mapos/emitente">Configurar</a>
                                                 <<<</td> </tr> <?php
                                     } else { ?> <tr>
-                                            <td style="width: 25%"><img src=" <?php echo $emitente->url_logo; ?> "></td>
+                                            <td style="width: 25%"><img src=" <?= esc($emitente->url_logo) ?> "></td>
                                             <td> <span style="font-size: 20px; ">
-                                                    <?php echo $emitente->nome; ?></span> <br />
+                                                    <?= esc($emitente->nome) ?></span> <br />
                                                 <span>
-                                                    <?php echo $emitente->cnpj; ?> <br />
-                                                    <?php echo $emitente->rua . ', nº:' . $emitente->numero . ', ' . $emitente->bairro . ' - ' . $emitente->cidade . ' - ' . $emitente->uf; ?> </span> </br> <span> E-mail:
-                                                    <?php echo $emitente->email . ' - Fone: ' . $emitente->telefone; ?>
+                                                    <?= esc($emitente->cnpj) ?> <br />
+                                                    <?= esc($emitente->rua) . ', nº:' . esc($emitente->numero) . ', ' . esc($emitente->bairro) . ' - ' . esc($emitente->cidade) . ' - ' . esc($emitente->uf) ?> </span> </br> <span> E-mail:
+                                                    <?= esc($emitente->email) . ' - Fone: ' . esc($emitente->telefone) ?>
                                                 </span>
                                             </td>
                                             <td style="width: 18%; text-align: center">
                                                 <br /> <br />
                                                 <span>Emissão:
-                                                    <?php echo date('d/m/Y'); ?>
+                                                    <?= date('d/m/Y') ?>
                                                 </span>
                                             </td>
                                         </tr>
@@ -129,7 +129,7 @@
                                             <ul>
                                                 <li>
 
-                                                    <span><?php echo printSafeHtml($result->textoGarantia) ?></span><br />
+                                                    <span><?= printSafeHtml($result->textoGarantia) ?></span><br />
                                                 </li>
                                             </ul>
                                         </td>
@@ -159,8 +159,8 @@
             </div>
         </div>
     </div>
-    <script src="<?php echo base_url(); ?>assets/js/bootstrap.min.js"></script>
-    <script src="<?php echo base_url(); ?>assets/js/matrix.js"></script>
+    <script src="<?= base_url() ?>assets/js/bootstrap.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/matrix.js"></script>
     <script>
         window.print();
     </script>
diff --git a/application/views/garantias/imprimirGarantiaOs.php b/application/views/garantias/imprimirGarantiaOs.php
index ff4472525..1273096ba 100644
--- a/application/views/garantias/imprimirGarantiaOs.php
+++ b/application/views/garantias/imprimirGarantiaOs.php
@@ -5,9 +5,9 @@
     <title>Map OS</title>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/matrix-style.css" />
-    <link href="<?php echo base_url(); ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/matrix-style.css" />
+    <link href="<?= base_url() ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
     <link href="<?= base_url('assets/css/custom.css'); ?>" rel="stylesheet">
     <link href='http://fonts.googleapis.com/css?family=Open+Sans:400,700,800' rel='stylesheet' type='text/css'>
     <style>
@@ -82,21 +82,21 @@
                                 <tbody>
                                     <?php if ($emitente == null) { ?>
                                         <tr>
-                                            <td colspan="3" class="alert">Você precisa configurar os dados do emitente. >>><a href="<?php echo base_url(); ?>index.php/mapos/emitente">Configurar</a>
+                                            <td colspan="3" class="alert">Você precisa configurar os dados do emitente. >>><a href="<?= base_url() ?>index.php/mapos/emitente">Configurar</a>
                                                 <<<</td> </tr> <?php
                                     } else { ?> <tr>
-                                            <td style="width: 25%"><img src=" <?php echo $emitente->url_logo; ?> "></td>
+                                            <td style="width: 25%"><img src=" <?= esc($emitente->url_logo) ?> "></td>
                                             <td> <span style="font-size: 20px; ">
-                                                    <?php echo $emitente->nome; ?></span> <br />
+                                                    <?= esc($emitente->nome) ?></span> <br />
                                                 <span>
-                                                    <?php echo $emitente->cnpj; ?> <br />
-                                                    <?php echo $emitente->rua . ', nº:' . $emitente->numero . ', ' . $emitente->bairro . ' - ' . $emitente->cidade . ' - ' . $emitente->uf; ?> </span> </br> <span> E-mail:
-                                                    <?php echo $emitente->email . ' - Fone: ' . $emitente->telefone; ?>
+                                                    <?= esc($emitente->cnpj) ?> <br />
+                                                    <?= esc($emitente->rua) . ', nº:' . esc($emitente->numero) . ', ' . esc($emitente->bairro) . ' - ' . esc($emitente->cidade) . ' - ' . esc($emitente->uf) ?> </span> </br> <span> E-mail:
+                                                    <?= esc($emitente->email) . ' - Fone: ' . esc($emitente->telefone) ?>
                                                 </span>
                                             </td>
                                             <td style="width: 20%; text-align: center">
                                                 <br />
-                                                <span>Garantia OS: <?= $osGarantia->idOs ? $osGarantia->idOs : ""?>
+                                                <span>Garantia OS: <?= ($osGarantia->idOs ? esc($osGarantia->idOs) : "") ?>
                                                 </span>
                                                 <br />
                                                 <span>Emissão:
@@ -130,7 +130,7 @@
                                             <ul>
                                                 <li>
 
-                                                    <span><?php echo printSafeHtml($osGarantia->textoGarantia) ?></span><br />
+                                                    <span><?= printSafeHtml($osGarantia->textoGarantia) ?></span><br />
                                                 </li>
                                             </ul>
                                         </td>
@@ -161,8 +161,8 @@
             </div>
         </div>
     </div>
-    <script src="<?php echo base_url(); ?>assets/js/bootstrap.min.js"></script>
-    <script src="<?php echo base_url(); ?>assets/js/matrix.js"></script>
+    <script src="<?= base_url() ?>assets/js/bootstrap.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/matrix.js"></script>
     <script>
         window.print();
     </script>
diff --git a/application/views/garantias/visualizarGarantia.php b/application/views/garantias/visualizarGarantia.php
index 895343c8c..bb1869646 100644
--- a/application/views/garantias/visualizarGarantia.php
+++ b/application/views/garantias/visualizarGarantia.php
@@ -12,7 +12,7 @@
                         echo '<a title="Editar Termo de Garantia" class="button btn btn-mini btn-success" href="' . base_url() . 'index.php/garantias/editar/' . $result->idGarantias . '">
     <span class="button__icon"><i class="bx bx-edit"></i> </span> <span class="button__text">Editar</span></a>';
                     } ?>
-                    <a target="_blank" title="Imprimir" class="button btn btn-mini btn-inverse" href="<?php echo site_url() ?>/garantias/imprimir/<?php echo $result->idGarantias; ?>">
+                    <a target="_blank" title="Imprimir" class="button btn btn-mini btn-inverse" href="<?= site_url() ?>/garantias/imprimir/<?= esc($result->idGarantias) ?>">
                       <span class="button__icon"><i class="bx bx-printer"></i></span> <span class="button__text">Imprimir</span></a>
                 </div>
             </div>
@@ -23,18 +23,18 @@
                             <tbody>
                                 <?php if ($emitente == null) { ?>
                                     <tr>
-                                        <td colspan="3" class="alert">Você precisa configurar os dados do emitente. >>><a href="<?php echo base_url(); ?>index.php/mapos/emitente">Configurar</a>
+                                        <td colspan="3" class="alert">Você precisa configurar os dados do emitente. >>><a href="<?= base_url() ?>index.php/mapos/emitente">Configurar</a>
                                             <<<</td> </tr> <?php
                                 } else { ?> <tr>
-                                        <td style="width: 25%"><img src=" <?php echo $emitente->url_logo; ?> "></td>
+                                        <td style="width: 25%"><img src=" <?= esc($emitente->url_logo) ?> "></td>
                                         <td> <span style="font-size: 20px; ">
-                                                <?php echo $emitente->nome; ?></span> </br><span>
-                                                <?php echo $emitente->cnpj; ?> </br>
-                                                <?php echo $emitente->rua . ', nº:' . $emitente->numero . ', ' . $emitente->bairro . ' - ' . $emitente->cidade . ' - ' . $emitente->uf; ?> </span> </br> <span> E-mail:
-                                                <?php echo $emitente->email . ' - Fone: ' . $emitente->telefone; ?></span></td>
+                                                <?= esc($emitente->nome) ?></span> </br><span>
+                                                <?= esc($emitente->cnpj) ?> </br>
+                                                <?= esc($emitente->rua) . ', nº:' . esc($emitente->numero) . ', ' . esc($emitente->bairro) . ' - ' . esc($emitente->cidade) . ' - ' . esc($emitente->uf) ?> </span> </br> <span> E-mail:
+                                                <?= esc($emitente->email) . ' - Fone: ' . esc($emitente->telefone) ?></span></td>
                                         <td style="width: 18%; text-align: center">#Garantia: <span>
-                                                <?php echo $result->idGarantias ?></span></br> </br> <span>Emissão:
-                                                <?php echo date('d/m/Y'); ?></span>
+                                                <?= esc($result->idGarantias) ?></span></br> </br> <span>Emissão:
+                                                <?= date('d/m/Y') ?></span>
                                         </td>
                                     </tr>
                                 <?php
@@ -51,11 +51,11 @@
                                                     <h5>Responsável</h5>
                                                 </span>
                                                 <span>
-                                                    <?php echo $result->nome ?></span> <br />
+                                                    <?= esc($result->nome) ?></span> <br />
                                                 <span>Telefone:
-                                                    <?php echo $result->telefone ?></span><br />
+                                                    <?= esc($result->telefone) ?></span><br />
                                                 <span>Email:
-                                                    <?php echo $result->email ?></span>
+                                                    <?= esc($result->email) ?></span>
                                             </li>
                                         </ul>
                                     </td>
@@ -65,7 +65,7 @@
                                                 <span>
                                                     <h5>Data</h5>
                                                 </span>
-                                                <span> <?php echo date('d/m/Y', strtotime($result->dataGarantia)); ?></span> <br />
+                                                <span> <?= date('d/m/Y', strtotime($result->dataGarantia)) ?></span> <br />
 
                                             </li>
                                         </ul>
@@ -76,7 +76,7 @@
                                                 <span>
                                                     <h5>Ref. Termo</h5>
                                                 </span>
-                                                <span><?php echo $result->refGarantia ?> </span>
+                                                <span><?= esc($result->refGarantia) ?> </span>
                                             </li>
                                         </ul>
                                     </td>
@@ -94,7 +94,7 @@
                                                 <span>
                                                     <h5>Texto da Garantia</h5>
                                                 </span><br />
-                                                <span><?php echo printSafeHtml($result->textoGarantia) ?></span><br />
+                                                <span><?= printSafeHtml($result->textoGarantia) ?></span><br />
                                             </li>
                                         </ul>
                                     </td>
diff --git a/application/views/mapos/configurar.php b/application/views/mapos/configurar.php
index f5102db29..bd9b14d25 100644
--- a/application/views/mapos/configurar.php
+++ b/application/views/mapos/configurar.php
@@ -17,15 +17,15 @@
                 <li><a data-toggle="tab" href="#menu6">API</a></li>
                 <li><a data-toggle="tab" href="#menu7">E-mail</a></li>
             </ul>
-            <form action="<?php echo current_url(); ?>" id="formConfigurar" method="post" class="form-horizontal">
+            <form action="<?= current_url() ?>" id="formConfigurar" method="post" class="form-horizontal">
                 <div class="widget-content nopadding tab-content">
-                    <?php echo $custom_error; ?>
+                    <?= $custom_error ?>
                     <!-- Menu Gerais -->
                     <div id="home" class="tab-pane fade in active">
                         <div class="control-group">
                             <label for="app_name" class="control-label">Nome do Sistema</label>
                             <div class="controls">
-                                <input type="text" required name="app_name" value="<?= $configuration['app_name'] ?>">
+                                <input type="text" required name="app_name" value="<?= esc($configuration['app_name']) ?>">
                                 <span class="help-inline">Nome do sistema</span>
                             </div>
                         </div>
@@ -110,7 +110,7 @@
                         <div class="control-group">
                             <label for="pix_key" class="control-label">Chave Pix para Recebimento de Pagamentos</label>
                             <div class="controls">
-                                <input type="text" name="pix_key" value="<?= $configuration['pix_key'] ?>">
+                                <input type="text" name="pix_key" value="<?= esc($configuration['pix_key']) ?>">
                                 <span class="help-inline">Chave Pix para Recebimento de Pagamentos</span>
                             </div>
                         </div>
@@ -131,14 +131,14 @@
                         <div class="control-group">
                             <label for="EFI_CREDENTIAIS_CLIENT_ID" class="control-label">CLIENT_ID</label>
                             <div class="controls">
-                                <input type="text" name="PAYMENT_GATEWAYS_EFI_CREDENTIAIS_CLIENT_ID" value="<?= $_ENV['PAYMENT_GATEWAYS_EFI_CREDENTIAIS_CLIENT_ID'] ?>" id="EFI_CREDENTIAIS_CLIENT_ID">
+                                <input type="text" name="PAYMENT_GATEWAYS_EFI_CREDENTIAIS_CLIENT_ID" value="<?= esc($_ENV['PAYMENT_GATEWAYS_EFI_CREDENTIAIS_CLIENT_ID']) ?>" id="EFI_CREDENTIAIS_CLIENT_ID">
                                 <span class="help-inline">Pode ser encontrado no menu <a href="https://app.sejaefi.com.br/api/aplicacoes" target="_blank" rel="noopener noreferrer">"API" -> "Aplicações"</a></span>
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="EFI_CREDENTIAIS_CLIENT_SECRET" class="control-label">CLIENT_SECRET</label>
                             <div class="controls">
-                                <input type="text" name="PAYMENT_GATEWAYS_EFI_CREDENTIAIS_CLIENT_SECRET" value="<?= $_ENV['PAYMENT_GATEWAYS_EFI_CREDENTIAIS_CLIENT_SECRET'] ?>" id="EFI_CREDENTIAIS_CLIENT_SECRET">
+                                <input type="text" name="PAYMENT_GATEWAYS_EFI_CREDENTIAIS_CLIENT_SECRET" value="<?= esc($_ENV['PAYMENT_GATEWAYS_EFI_CREDENTIAIS_CLIENT_SECRET']) ?>" id="EFI_CREDENTIAIS_CLIENT_SECRET">
                                 <span class="help-inline">Pode ser encontrado no menu <a href="https://app.sejaefi.com.br/api/aplicacoes" target="_blank" rel="noopener noreferrer">"API" -> "Aplicações"</a></span>
                             </div>
                         </div>
@@ -149,7 +149,7 @@
                                     <?php for ($i = 1; $i <= 30; $i++) :
                                         $diasEFI = "P{$i}D";
                                         ?>
-                                        <option value="<?= $diasEFI ?>" <?= $diasEFI == $_ENV['PAYMENT_GATEWAYS_EFI_BOLETO_EXPIRATION'] ? 'selected' : '' ?>><?= $i ?> dia<?= $i > 1 ? 's' : '' ?></option>
+                                        <option value="<?= esc($diasEFI) ?>" <?= $diasEFI == $_ENV['PAYMENT_GATEWAYS_EFI_BOLETO_EXPIRATION'] ? 'selected' : '' ?>><?= esc($i) ?> dia<?= $i > 1 ? 's' : '' ?></option>
                                     <?php endfor; ?>
                                 </select>
                                 <span class="help-inline">A quantidade de dias selecionado será somado a data que a cobrança for gerada.</span>
@@ -162,28 +162,28 @@
                         <div class="control-group">
                             <label for="MERCADO_PAGO_CREDENTIALS_PUBLIC_KEY" class="control-label">PUBLIC_KEY</label>
                             <div class="controls">
-                                <input type="text" name="PAYMENT_GATEWAYS_MERCADO_PAGO_CREDENTIALS_PUBLIC_KEY" value="<?= $_ENV['PAYMENT_GATEWAYS_MERCADO_PAGO_CREDENTIALS_PUBLIC_KEY'] ?>" id="MERCADO_PAGO_CREDENTIALS_PUBLIC_KEY">
+                                <input type="text" name="PAYMENT_GATEWAYS_MERCADO_PAGO_CREDENTIALS_PUBLIC_KEY" value="<?= esc($_ENV['PAYMENT_GATEWAYS_MERCADO_PAGO_CREDENTIALS_PUBLIC_KEY']) ?>" id="MERCADO_PAGO_CREDENTIALS_PUBLIC_KEY">
                                 <span class="help-inline">Pode ser encontrado no menu <a href="https://www.mercadopago.com.br/settings/account/credentials" target="_blank" rel="noopener noreferrer">"Seu Negócio" -> "Configurações" -> "Credenciais"</a></span>
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="MERCADO_PAGO_CREDENTIALS_ACCESS_TOKEN" class="control-label">ACCESS_TOKEN</label>
                             <div class="controls">
-                                <input type="text" name="PAYMENT_GATEWAYS_MERCADO_PAGO_CREDENTIALS_ACCESS_TOKEN" value="<?= $_ENV['PAYMENT_GATEWAYS_MERCADO_PAGO_CREDENTIALS_ACCESS_TOKEN'] ?>" id="MERCADO_PAGO_CREDENTIALS_ACCESS_TOKEN">
+                                <input type="text" name="PAYMENT_GATEWAYS_MERCADO_PAGO_CREDENTIALS_ACCESS_TOKEN" value="<?= esc($_ENV['PAYMENT_GATEWAYS_MERCADO_PAGO_CREDENTIALS_ACCESS_TOKEN']) ?>" id="MERCADO_PAGO_CREDENTIALS_ACCESS_TOKEN">
                                 <span class="help-inline">Pode ser encontrado no menu <a href="https://www.mercadopago.com.br/settings/account/credentials" target="_blank" rel="noopener noreferrer">"Seu Negócio" -> "Configurações" -> "Credenciais"</a></span>
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="MERCADO_PAGO_CREDENTIALS_CLIENT_ID" class="control-label">CLIENT_ID</label>
                             <div class="controls">
-                                <input type="text" name="PAYMENT_GATEWAYS_MERCADO_PAGO_CREDENTIALS_CLIENT_ID" value="<?= $_ENV['PAYMENT_GATEWAYS_MERCADO_PAGO_CREDENTIALS_CLIENT_ID'] ?>" id="MERCADO_PAGO_CREDENTIALS_CLIENT_ID">
+                                <input type="text" name="PAYMENT_GATEWAYS_MERCADO_PAGO_CREDENTIALS_CLIENT_ID" value="<?= esc($_ENV['PAYMENT_GATEWAYS_MERCADO_PAGO_CREDENTIALS_CLIENT_ID']) ?>" id="MERCADO_PAGO_CREDENTIALS_CLIENT_ID">
                                 <span class="help-inline">Pode ser encontrado no menu <a href="https://www.mercadopago.com.br/settings/account/credentials" target="_blank" rel="noopener noreferrer">"Seu Negócio" -> "Configurações" -> "Credenciais"</a></span>
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="MERCADO_PAGO_CREDENTIALS_CLIENT_SECRET" class="control-label">CLIENT_SECRET</label>
                             <div class="controls">
-                                <input type="text" name="PAYMENT_GATEWAYS_MERCADO_PAGO_CREDENTIALS_CLIENT_SECRET" value="<?= $_ENV['PAYMENT_GATEWAYS_MERCADO_PAGO_CREDENTIALS_CLIENT_SECRET'] ?>" id="MERCADO_PAGO_CREDENTIALS_CLIENT_SECRET">
+                                <input type="text" name="PAYMENT_GATEWAYS_MERCADO_PAGO_CREDENTIALS_CLIENT_SECRET" value="<?= esc($_ENV['PAYMENT_GATEWAYS_MERCADO_PAGO_CREDENTIALS_CLIENT_SECRET']) ?>" id="MERCADO_PAGO_CREDENTIALS_CLIENT_SECRET">
                                 <span class="help-inline">Pode ser encontrado no menu <a href="https://www.mercadopago.com.br/settings/account/credentials" target="_blank" rel="noopener noreferrer">"Seu Negócio" -> "Configurações" -> "Credenciais"</a></span>
                             </div>
                         </div>
@@ -194,7 +194,7 @@
                                     <?php for ($i = 1; $i <= 30; $i++) :
                                         $diasMP = "P{$i}D";
                                         ?>
-                                        <option value="<?= $diasMP ?>" <?= $diasMP == $_ENV['PAYMENT_GATEWAYS_MERCADO_PAGO_BOLETO_EXPIRATION'] ? 'selected' : '' ?>><?= $i ?> dia<?= $i > 1 ? 's' : '' ?></option>
+                                        <option value="<?= esc($diasMP) ?>" <?= $diasMP == $_ENV['PAYMENT_GATEWAYS_MERCADO_PAGO_BOLETO_EXPIRATION'] ? 'selected' : '' ?>><?= esc($i) ?> dia<?= $i > 1 ? 's' : '' ?></option>
                                     <?php endfor; ?>
                                 </select>
                                 <span class="help-inline">A quantidade de dias selecionado será somado a data que a cobrança for gerada.</span>
@@ -227,7 +227,7 @@
                         <div class="control-group">
                             <label for="ASAAS_CREDENTIAIS_API_KEY" class="control-label">API_KEY</label>
                             <div class="controls">
-                                <input type="text" name="PAYMENT_GATEWAYS_ASAAS_CREDENTIAIS_API_KEY" value="<?= $_ENV['PAYMENT_GATEWAYS_ASAAS_CREDENTIAIS_API_KEY'] ?>" id="ASAAS_CREDENTIAIS_API_KEY">
+                                <input type="text" name="PAYMENT_GATEWAYS_ASAAS_CREDENTIAIS_API_KEY" value="<?= esc($_ENV['PAYMENT_GATEWAYS_ASAAS_CREDENTIAIS_API_KEY']) ?>" id="ASAAS_CREDENTIAIS_API_KEY">
                                 <span class="help-inline">Pode ser encontrado no menu "Minha Conta", clique em "Integração" e depois em "Gerar API Key"</span>
                             </div>
                         </div>
@@ -238,7 +238,7 @@
                                     <?php for ($i = 1; $i <= 30; $i++) :
                                         $diasASAAS = "P{$i}D";
                                         ?>
-                                        <option value="<?= $diasASAAS ?>" <?= $diasASAAS == $_ENV['PAYMENT_GATEWAYS_ASAAS_BOLETO_EXPIRATION'] ? 'selected' : '' ?>><?= $i ?> dia<?= $i > 1 ? 's' : '' ?></option>
+                                        <option value="<?= esc($diasASAAS) ?>" <?= $diasASAAS == $_ENV['PAYMENT_GATEWAYS_ASAAS_BOLETO_EXPIRATION'] ? 'selected' : '' ?>><?= esc($i) ?> dia<?= $i > 1 ? 's' : '' ?></option>
                                     <?php endfor; ?>
                                 </select>
                                 <span class="help-inline">A quantidade de dias selecionado será somado a data que a cobrança for gerada.</span>
@@ -304,7 +304,7 @@
                         <div class="control-group">
                             <label for="notifica_whats" class="control-label">Notificação do whatsapp</label>
                             <div class="controls">
-                                <textarea rows="5" cols="20" name="notifica_whats" id="notifica_whats" placeholder="Use as tags abaixo para criar seu texto!" style="margin: 0px; width: 606px; height: 86px;"><?php echo $configuration['notifica_whats']; ?></textarea>
+                                <textarea rows="5" cols="20" name="notifica_whats" id="notifica_whats" placeholder="Use as tags abaixo para criar seu texto!" style="margin: 0px; width: 606px; height: 86px;"><?= esc($configuration['notifica_whats']) ?></textarea>
                             </div>
                             <div class="span3">
                                 <label for="notifica_whats_select">Tags de preenchimento<span class="required"></span></label>
@@ -455,14 +455,14 @@
                         <div class="control-group">
                             <label for="EMAIL_PROTOCOL" class="control-label">Protocolo de E-mail</label>
                             <div class="controls">
-                                <input type="text" name="EMAIL_PROTOCOL" value="<?= $_ENV['EMAIL_PROTOCOL'] ?>" id="EMAIL_PROTOCOL">
+                                <input type="text" name="EMAIL_PROTOCOL" value="<?= esc($_ENV['EMAIL_PROTOCOL']) ?>" id="EMAIL_PROTOCOL">
                                 <span class="help-inline">Informe o protocolo que será utilizado</span>
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="EMAIL_SMTP_HOST" class="control-label">Endereço do Host</label>
                             <div class="controls">
-                                <input type="text" name="EMAIL_SMTP_HOST" value="<?= $_ENV['EMAIL_SMTP_HOST'] ?>" id="EMAIL_SMTP_HOST">
+                                <input type="text" name="EMAIL_SMTP_HOST" value="<?= esc($_ENV['EMAIL_SMTP_HOST']) ?>" id="EMAIL_SMTP_HOST">
                                 <span class="help-inline">Informe o endereço do host</span>
                             </div>
                         </div>
@@ -479,21 +479,21 @@
                         <div class="control-group">
                             <label for="EMAIL_SMTP_PORT" class="control-label">Porta</label>
                             <div class="controls">
-                                <input type="text" name="EMAIL_SMTP_PORT" value="<?= $_ENV['EMAIL_SMTP_PORT'] ?>" id="EMAIL_SMTP_PORT">
+                                <input type="text" name="EMAIL_SMTP_PORT" value="<?= esc($_ENV['EMAIL_SMTP_PORT']) ?>" id="EMAIL_SMTP_PORT">
                                 <span class="help-inline">Informe a porta que será utilizada.</span>
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="EMAIL_SMTP_USER" class="control-label">Usuário</label>
                             <div class="controls">
-                                <input type="text" name="EMAIL_SMTP_USER" value="<?= $_ENV['EMAIL_SMTP_USER'] ?>" id="EMAIL_SMTP_USER">
+                                <input type="text" name="EMAIL_SMTP_USER" value="<?= esc($_ENV['EMAIL_SMTP_USER']) ?>" id="EMAIL_SMTP_USER">
                                 <span class="help-inline">Informe nome de usuáriodo e-mail.</span>
                             </div>
                         </div>
                         <div class="control-group">
                             <label for="EMAIL_SMTP_PASS" class="control-label">Senha</label>
                             <div class="controls">
-                                <input type="password" name="EMAIL_SMTP_PASS" value="<?= $_ENV['EMAIL_SMTP_PASS'] ?>" id="EMAIL_SMTP_PASS">
+                                <input type="password" name="EMAIL_SMTP_PASS" value="<?= esc($_ENV['EMAIL_SMTP_PASS']) ?>" id="EMAIL_SMTP_PASS">
                                 <span class="help-inline">Informe a senha do e-mail.</span>
                             </div>
                         </div>
@@ -513,7 +513,7 @@
 </div>
 <!-- Modal -->
 <div id="modal-confirmaratualiza" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form action="<?php echo base_url() ?>index.php/clientes/excluir" method="post">
+    <form action="<?= base_url() ?>index.php/clientes/excluir" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h5 id="myModalLabel">Atualização de sistema</h5>
@@ -533,7 +533,7 @@
 </div>
 <!-- Modal -->
 <div id="modal-confirmabanco" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form action="<?php echo base_url() ?>index.php/clientes/excluir" method="post">
+    <form action="<?= base_url() ?>index.php/clientes/excluir" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h5 id="myModalLabel">Atualização de sistema</h5>
@@ -541,7 +541,7 @@
         <div class="modal-body">
             <h5 style="text-align: left">Deseja realmente fazer a atualização do banco de dados?</h5>
             <h7 style="text-align: left">Recomendamos que faça um backup antes de prosseguir!
-                <a target="_blank" title="Fazer Bakup" class="btn btn-mini btn-inverse" href="<?php echo site_url() ?>/mapos/backup">Fazer Backup</a>
+                <a target="_blank" title="Fazer Bakup" class="btn btn-mini btn-inverse" href="<?= site_url() ?>/mapos/backup">Fazer Backup</a>
             </h7>
         </div>
         <div class="modal-footer" style="display:flex;justify-content: center">
diff --git a/application/views/mapos/emitente.php b/application/views/mapos/emitente.php
index d28da320e..6c571a1af 100644
--- a/application/views/mapos/emitente.php
+++ b/application/views/mapos/emitente.php
@@ -1,6 +1,6 @@
-<script src="<?php echo base_url() ?>assets/js/jquery.mask.min.js"></script>
-<script src="<?php echo base_url() ?>assets/js/funcoes.js"></script>
-<script src="<?php echo base_url() ?>assets/js/sweetalert2.all.min.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.mask.min.js"></script>
+<script src="<?= base_url() ?>assets/js/funcoes.js"></script>
+<script src="<?= base_url() ?>assets/js/sweetalert2.all.min.js"></script>
 
 <style>
     .modal-body {
diff --git a/application/views/mapos/login.php b/application/views/mapos/login.php
index 5a41033f0..8425c1e23 100644
--- a/application/views/mapos/login.php
+++ b/application/views/mapos/login.php
@@ -2,7 +2,7 @@
 <html lang="pt-br">
 
 <head>
-  <title><?= $this->config->item('app_name') ?> </title>
+  <title><?= esc($this->config->item('app_name')) ?> </title>
   <meta charset="UTF-8" />
   <meta name="viewport" content="width=device-width, initial-scale=1.0" />
   <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
@@ -35,7 +35,7 @@ function saudacao($nome = '')
   ?>
       </h1>
       <h2 class="h-two"> Ao Sistema de Controle de Ordens de Serviço</h2>
-      <img src="<?php echo base_url() ?>assets/img/dashboard-animate.svg" class="left-login-image" alt="Map-OS - Versão: <?= $this->config->item('app_version'); ?>">
+      <img src="<?= base_url() ?>assets/img/dashboard-animate.svg" class="left-login-image" alt="Map-OS - Versão: <?= esc($this->config->item('app_version')); ?>">
     </div>
     <form class="form-vertical" id="formLogin" method="post" action="<?= site_url('login/verificarLogin') ?>">
       <input type="hidden" name="<?= $this->security->get_csrf_token_name(); ?>" value="<?= $this->security->get_csrf_hash(); ?>">
@@ -43,7 +43,7 @@ function saudacao($nome = '')
         <div id="loginbox">
           <div class="alert alert-danger">
             <button type="button" class="close" data-dismiss="alert">&times;</button>
-            <?= $this->session->flashdata('error'); ?>
+            <?= esc($this->session->flashdata('error')); ?>
           </div>
         </div>
       <?php } ?>
@@ -54,13 +54,13 @@ function saudacao($nome = '')
               <div class="content">
                 <div id="newlog">
                   <div class="icon2">
-                    <img src="<?php echo base_url() ?>assets/img/logo-two.png">
+                    <img src="<?= base_url() ?>assets/img/logo-two.png">
                   </div>
                   <div class="title01">
                     <?= '<img src="' . base_url() . 'assets/img/logo-mapos-branco.png">'; ?>
                   </div>
                 </div>
-                <div id="mcell">Versão: <?= $this->config->item('app_version'); ?></div>
+                <div id="mcell">Versão: <?= esc($this->config->item('app_version')); ?></div>
                 <div class="input-field">
                   <label class="fas fa-user" for="nome"></label>
                   <input id="email" name="email" type="text" placeholder="Email">
diff --git a/application/views/mapos/minhaConta.php b/application/views/mapos/minhaConta.php
index 537117f97..3f85b6d85 100644
--- a/application/views/mapos/minhaConta.php
+++ b/application/views/mapos/minhaConta.php
@@ -122,11 +122,11 @@
                 <div class="span12">
                     <ul class="site-stats">
                         <li class="bg_ls span12"><strong>Nome:
-                                <?= $usuario->nome ?></strong></li>
+                                <?= esc($usuario->nome) ?></strong></li>
                         <li class="bg_lb span12" style="margin-left: 0"><strong>Telefone:
-                                <?= $usuario->telefone ?></strong></li>
+                                <?= esc($usuario->telefone) ?></strong></li>
                         <li class="bg_lg span12" style="margin-left: 0"><strong>Email:
-                                <?= $usuario->email ?></strong></li>
+                                <?= esc($usuario->email) ?></strong></li>
                         <li class="bg_lo span12" style="margin-left: 0"><strong>Nível:
                                 <?= $usuario->permissao; ?></strong></li>
                         <li class="bg_lh span12" style="margin-left: 0; border-bottom-left-radius: 9px;border-bottom-right-radius: 9px"><strong>Acesso expira em:
diff --git a/application/views/mapos/painel.php b/application/views/mapos/painel.php
index ed6059019..5e2ba7424 100644
--- a/application/views/mapos/painel.php
+++ b/application/views/mapos/painel.php
@@ -1,4 +1,4 @@
-<!--[if lt IE 9]><script language="javascript" type="text/javascript" src="<?php echo base_url(); ?>js/dist/excanvas.min.js"></script><![endif]-->
+<!--[if lt IE 9]><script language="javascript" type="text/javascript" src="<?= base_url() ?>js/dist/excanvas.min.js"></script><![endif]-->
 
 <script language="javascript" type="text/javascript" src="<?= base_url(); ?>assets/js/dist/jquery.jqplot.min.js"></script>
 <script type="text/javascript" src="<?= base_url(); ?>assets/js/dist/plugins/jqplot.pieRenderer.min.js"></script>
@@ -8,7 +8,7 @@
 
 <link href='<?= base_url(); ?>assets/css/fullcalendar.min.css' rel='stylesheet' />
 <link rel="stylesheet" type="text/css" href="<?= base_url(); ?>assets/js/dist/jquery.jqplot.min.css" />
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/custom.css" />
+<link rel="stylesheet" href="<?= base_url() ?>assets/css/custom.css" />
 
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
@@ -148,7 +148,7 @@
                 </div>
 
                 <div class="new-bottons">
-                    <a href="<?php echo base_url(); ?>index.php/clientes/adicionar" class="card tip-top" title="Add Clientes e Fornecedores">
+                    <a href="<?= base_url() ?>index.php/clientes/adicionar" class="card tip-top" title="Add Clientes e Fornecedores">
                         <div><i class='bx bxs-group iconBx'></i></div>
                         <div>
                             <div class="cardName2"><?= $this->db->count_all('clientes'); ?></div>
@@ -156,7 +156,7 @@
                         </div>
                     </a>
 
-                    <a href="<?php echo base_url(); ?>index.php/produtos/adicionar" class="card tip-top" title="Adicionar Produtos">
+                    <a href="<?= base_url() ?>index.php/produtos/adicionar" class="card tip-top" title="Adicionar Produtos">
                         <div><i class='bx bxs-package iconBx2'></i></div>
                         <div>
                             <div class="cardName2"><?= $this->db->count_all('produtos'); ?></div>
@@ -164,7 +164,7 @@
                         </div>
                     </a>
 
-                    <a href="<?php echo base_url() ?>index.php/servicos/adicionar" class="card tip-top" title="Adicionar serviços">
+                    <a href="<?= base_url() ?>index.php/servicos/adicionar" class="card tip-top" title="Adicionar serviços">
                         <div><i class='bx bxs-stopwatch iconBx3'></i></div>
                         <div>
                             <div class="cardName2"><?= $this->db->count_all('servicos'); ?></div>
@@ -172,7 +172,7 @@
                         </div>
                     </a>
 
-                    <a href="<?php echo base_url(); ?>index.php/os/adicionar" class="card tip-top" title="Adicionar OS">
+                    <a href="<?= base_url() ?>index.php/os/adicionar" class="card tip-top" title="Adicionar OS">
                         <div><i class='bx bxs-spreadsheet iconBx4'></i></div>
                         <div>
                             <div class="cardName2"><?= $this->db->count_all('os'); ?></div>
@@ -180,7 +180,7 @@
                         </div>
                     </a>
 
-                    <a href="<?php echo base_url(); ?>index.php/garantias" class="card tip-top" title="Adicionar garantia">
+                    <a href="<?= base_url() ?>index.php/garantias" class="card tip-top" title="Adicionar garantia">
                         <div><i class='bx bxs-receipt iconBx6'></i></div>
                         <div>
                             <div class="cardName2"><?= $this->db->count_all('garantias'); ?></div>
@@ -188,7 +188,7 @@
                         </div>
                     </a>
 
-                    <a href="<?php echo base_url() ?>index.php/vendas/adicionar" class="card tip-top" title="Adicionar Vendas">
+                    <a href="<?= base_url() ?>index.php/vendas/adicionar" class="card tip-top" title="Adicionar Vendas">
                         <div><i class='bx bxs-cart-alt iconBx5'></i></div>
                         <div>
                             <div class="cardName2"><?= $this->db->count_all('vendas'); ?></div>
@@ -204,18 +204,18 @@
                                 <?php $diaRec = "VALOR_" . date('m') . "_REC";
                                 $diaDes = "VALOR_" . date('m') . "_DES"; ?>
 
-                                <a href="<?php echo base_url() ?>index.php/financeiro/lancamentos" class="card tip-top" title="Adicionar receita">
+                                <a href="<?= base_url() ?>index.php/financeiro/lancamentos" class="card tip-top" title="Adicionar receita">
                                     <div><i class='bx bxs-up-arrow-circle iconBx7'></i></div>
                                     <div>
-                                        <div class="cardName1 cardName2">R$ <?php echo number_format(($financeiro_mes_dia->$diaRec - $financeiro_mes_dia->$diaDes), 2, ',', '.'); ?></div>
+                                        <div class="cardName1 cardName2">R$ <?= number_format(($financeiro_mes_dia->$diaRec - $financeiro_mes_dia->$diaDes), 2, ',', '.') ?></div>
                                         <div class="cardName">Receita do dia</div>
                                     </div>
                                 </a>
 
-                                <a href="<?php echo base_url() ?>index.php/financeiro/lancamentos" class="card tip-top" title="Adiciona despesa">
+                                <a href="<?= base_url() ?>index.php/financeiro/lancamentos" class="card tip-top" title="Adiciona despesa">
                                     <div><i class='bx bxs-down-arrow-circle iconBx8'></i></div>
                                     <div>
-                                        <div class="cardName1 cardName2">R$ <?php echo number_format(($financeiro_mes_dia->$diaDes ? $financeiro_mes_dia->$diaDes : 0), 2, ',', '.'); ?></div>
+                                        <div class="cardName1 cardName2">R$ <?= number_format(($financeiro_mes_dia->$diaDes ? $financeiro_mes_dia->$diaDes : 0), 2, ',', '.') ?></div>
                                         <div class="cardName">Despesa do dia</div>
                                     </div>
                                 </a>
@@ -240,7 +240,7 @@
                     <div class="widget-title2">
                         <h5 class="cardHeader">Balanço Mensal do Ano</h5>
                         <form method="get" style="display:flex;margin-right:18px;justify-content:flex-end">
-                            <input type="number" name="year" style="width:65px;margin-left:17px;margin-bottom:25px;margin-top:10px;padding-left: 35px" value="<?php echo intval(preg_replace('/[^0-9]/', '', $this->input->get('year'))) ?: date('Y') ?>">
+                            <input type="number" name="year" style="width:65px;margin-left:17px;margin-bottom:25px;margin-top:10px;padding-left: 35px" value="<?= intval(preg_replace('/[^0-9]/', '', $this->input->get('year'))) ?: date('Y') ?>">
                             <button type="submit" class="btn-xsx"><i class='bx bx-search iconX'></i></button>
                         </form>
                     </div>
@@ -284,18 +284,18 @@
             labels: ['Jan', 'Fev', 'Mar', 'Abr', 'Mai', 'Jun', 'Jul', 'Ago', 'Set', 'Out', 'Nov', 'Dez'],
             datasets: [{
                     label: 'Receita Líquida',
-                    data: [<?php echo($financeiro_mes->VALOR_JAN_REC - $financeiro_mes->VALOR_JAN_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_FEV_REC - $financeiro_mes->VALOR_FEV_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_MAR_REC - $financeiro_mes->VALOR_MAR_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_ABR_REC - $financeiro_mes->VALOR_ABR_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_MAI_REC - $financeiro_mes->VALOR_MAI_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_JUN_REC - $financeiro_mes->VALOR_JUN_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_JUL_REC - $financeiro_mes->VALOR_JUL_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_AGO_REC - $financeiro_mes->VALOR_AGO_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_SET_REC - $financeiro_mes->VALOR_SET_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_OUT_REC - $financeiro_mes->VALOR_OUT_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_NOV_REC - $financeiro_mes->VALOR_NOV_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_DEZ_REC - $financeiro_mes->VALOR_DEZ_DES); ?>
+                    data: [<?= ($financeiro_mes->VALOR_JAN_REC - $financeiro_mes->VALOR_JAN_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_FEV_REC - $financeiro_mes->VALOR_FEV_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_MAR_REC - $financeiro_mes->VALOR_MAR_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_ABR_REC - $financeiro_mes->VALOR_ABR_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_MAI_REC - $financeiro_mes->VALOR_MAI_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_JUN_REC - $financeiro_mes->VALOR_JUN_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_JUL_REC - $financeiro_mes->VALOR_JUL_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_AGO_REC - $financeiro_mes->VALOR_AGO_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_SET_REC - $financeiro_mes->VALOR_SET_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_OUT_REC - $financeiro_mes->VALOR_OUT_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_NOV_REC - $financeiro_mes->VALOR_NOV_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_DEZ_REC - $financeiro_mes->VALOR_DEZ_DES) ?>
                     ],
 
                     backgroundColor: 'rgba(75, 192, 192, 0.5)',
@@ -304,18 +304,18 @@
 
                 {
                     label: 'Receita Bruta',
-                    data: [<?php echo($financeiro_mes->VALOR_JAN_REC); ?>,
-                        <?php echo($financeiro_mes->VALOR_FEV_REC); ?>,
-                        <?php echo($financeiro_mes->VALOR_MAR_REC); ?>,
-                        <?php echo($financeiro_mes->VALOR_ABR_REC); ?>,
-                        <?php echo($financeiro_mes->VALOR_MAI_REC); ?>,
-                        <?php echo($financeiro_mes->VALOR_JUN_REC); ?>,
-                        <?php echo($financeiro_mes->VALOR_JUL_REC); ?>,
-                        <?php echo($financeiro_mes->VALOR_AGO_REC); ?>,
-                        <?php echo($financeiro_mes->VALOR_SET_REC); ?>,
-                        <?php echo($financeiro_mes->VALOR_OUT_REC); ?>,
-                        <?php echo($financeiro_mes->VALOR_NOV_REC); ?>,
-                        <?php echo($financeiro_mes->VALOR_DEZ_REC); ?>
+                    data: [<?= ($financeiro_mes->VALOR_JAN_REC) ?>,
+                        <?= ($financeiro_mes->VALOR_FEV_REC) ?>,
+                        <?= ($financeiro_mes->VALOR_MAR_REC) ?>,
+                        <?= ($financeiro_mes->VALOR_ABR_REC) ?>,
+                        <?= ($financeiro_mes->VALOR_MAI_REC) ?>,
+                        <?= ($financeiro_mes->VALOR_JUN_REC) ?>,
+                        <?= ($financeiro_mes->VALOR_JUL_REC) ?>,
+                        <?= ($financeiro_mes->VALOR_AGO_REC) ?>,
+                        <?= ($financeiro_mes->VALOR_SET_REC) ?>,
+                        <?= ($financeiro_mes->VALOR_OUT_REC) ?>,
+                        <?= ($financeiro_mes->VALOR_NOV_REC) ?>,
+                        <?= ($financeiro_mes->VALOR_DEZ_REC) ?>
                     ],
 
                     backgroundColor: 'rgba(255, 206, 86, 0.5)',
@@ -324,18 +324,18 @@
 
                 {
                     label: 'Despesas',
-                    data: [<?php echo($financeiro_mes->VALOR_JAN_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_FEV_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_MAR_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_ABR_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_MAI_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_JUN_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_JUL_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_AGO_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_SET_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_OUT_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_NOV_DES); ?>,
-                        <?php echo($financeiro_mes->VALOR_DEZ_DES); ?>
+                    data: [<?= ($financeiro_mes->VALOR_JAN_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_FEV_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_MAR_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_ABR_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_MAI_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_JUN_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_JUL_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_AGO_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_SET_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_OUT_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_NOV_DES) ?>,
+                        <?= ($financeiro_mes->VALOR_DEZ_DES) ?>
                     ],
 
                     backgroundColor: 'rgba(255, 99, 132, 0.5)',
@@ -344,18 +344,18 @@
 
                 {
                     label: 'Inadimplência',
-                    data: [<?php echo($financeiro_mesinadipl->VALOR_JAN_REC); ?>,
-                        <?php echo($financeiro_mesinadipl->VALOR_FEV_REC); ?>,
-                        <?php echo($financeiro_mesinadipl->VALOR_MAR_REC); ?>,
-                        <?php echo($financeiro_mesinadipl->VALOR_ABR_REC); ?>,
-                        <?php echo($financeiro_mesinadipl->VALOR_MAI_REC); ?>,
-                        <?php echo($financeiro_mesinadipl->VALOR_JUN_REC); ?>,
-                        <?php echo($financeiro_mesinadipl->VALOR_JUL_REC); ?>,
-                        <?php echo($financeiro_mesinadipl->VALOR_AGO_REC); ?>,
-                        <?php echo($financeiro_mesinadipl->VALOR_SET_REC); ?>,
-                        <?php echo($financeiro_mesinadipl->VALOR_OUT_REC); ?>,
-                        <?php echo($financeiro_mesinadipl->VALOR_NOV_REC); ?>,
-                        <?php echo($financeiro_mesinadipl->VALOR_DEZ_REC); ?>
+                    data: [<?= ($financeiro_mesinadipl->VALOR_JAN_REC) ?>,
+                        <?= ($financeiro_mesinadipl->VALOR_FEV_REC) ?>,
+                        <?= ($financeiro_mesinadipl->VALOR_MAR_REC) ?>,
+                        <?= ($financeiro_mesinadipl->VALOR_ABR_REC) ?>,
+                        <?= ($financeiro_mesinadipl->VALOR_MAI_REC) ?>,
+                        <?= ($financeiro_mesinadipl->VALOR_JUN_REC) ?>,
+                        <?= ($financeiro_mesinadipl->VALOR_JUL_REC) ?>,
+                        <?= ($financeiro_mesinadipl->VALOR_AGO_REC) ?>,
+                        <?= ($financeiro_mesinadipl->VALOR_SET_REC) ?>,
+                        <?= ($financeiro_mesinadipl->VALOR_OUT_REC) ?>,
+                        <?= ($financeiro_mesinadipl->VALOR_NOV_REC) ?>,
+                        <?= ($financeiro_mesinadipl->VALOR_DEZ_REC) ?>
                     ],
 
                     backgroundColor: 'rgba(54, 162, 235, 0.5)',
@@ -418,12 +418,12 @@
             datasets: [{
                 label: 'Total',
                 data: [
-                    <?php echo ($estatisticas_financeiro->total_receita != null) ?  $estatisticas_financeiro->total_receita : '0.00'; ?>,
-                    <?php echo ($estatisticas_financeiro->total_receita_pendente != null) ?  $estatisticas_financeiro->total_receita_pendente : '0.00'; ?>,
-                    <?php echo($estatisticas_financeiro->total_receita - $estatisticas_financeiro->total_despesa); ?>,
-                    <?php echo ($estatisticas_financeiro->total_despesa != null) ?  $estatisticas_financeiro->total_despesa : '0.00'; ?>,
-                    <?php echo ($estatisticas_financeiro->total_despesa_pendente != null) ?  $estatisticas_financeiro->total_despesa_pendente : '0.00'; ?>,
-                    <?php echo($estatisticas_financeiro->total_receita_pendente - $estatisticas_financeiro->total_despesa_pendente); ?>
+                    <?= (($estatisticas_financeiro->total_receita != null) ? (float) $estatisticas_financeiro->total_receita : 0.00) ?>,
+                    <?= (($estatisticas_financeiro->total_receita_pendente != null) ? (float) $estatisticas_financeiro->total_receita_pendente : 0.00) ?>,
+                    <?= ((float) $estatisticas_financeiro->total_receita - (float) $estatisticas_financeiro->total_despesa) ?>,
+                    <?= (($estatisticas_financeiro->total_despesa != null) ? (float) $estatisticas_financeiro->total_despesa : 0.00) ?>,
+                    <?= (($estatisticas_financeiro->total_despesa_pendente != null) ? (float) $estatisticas_financeiro->total_despesa_pendente : 0.00) ?>,
+                    <?= ((float) $estatisticas_financeiro->total_receita_pendente - (float) $estatisticas_financeiro->total_despesa_pendente) ?>
                 ],
 
                 backgroundColor: [
@@ -533,11 +533,11 @@ function responsiveFonts() {
                             ?>
                             <tr>
                                 <td>
-                                    <?= $o->idOs ?>
+                                    <?= esc($o->idOs) ?>
                                 </td>
 
                                 <td class="cli1">
-                                    <?= $o->nomeCliente ?>
+                                    <?= esc($o->nomeCliente) ?>
                                 </td>
 
                                 <td><?php if ($o->dataFinal != null) {
@@ -547,12 +547,12 @@ function responsiveFonts() {
                                 } ?></td>
 
                                 <td>
-                                    <span class="badge" style="background-color: <?= $cor ?>; border-color: <?= $cor ?>;"><?= $o->status ?></span>
+                                    <span class="badge" style="background-color: <?= esc_css($cor) ?>; border-color: <?= esc_css($cor) ?>;"><?= esc($o->status) ?></span>
                                 </td>
 
                                 <td>
                                     <?php if ($this->permission->checkPermission($this->session->userdata('permissao'), 'vOs')) : ?>
-                                        <a href="<?= base_url() ?>index.php/os/visualizar/<?= $o->idOs ?>" class="btn-nwe tip-top" title="Visualizar">
+                                        <a href="<?= base_url() ?>index.php/os/visualizar/<?= esc($o->idOs) ?>" class="btn-nwe tip-top" title="Visualizar">
                                             <i class="bx bx-show"></i> </a>
                                     <?php endif ?>
                                 </td>
@@ -622,11 +622,11 @@ function responsiveFonts() {
                             ?>
                             <tr>
                                 <td>
-                                    <?= $o->idOs ?>
+                                    <?= esc($o->idOs) ?>
                                 </td>
 
                                 <td class="cli1">
-                                    <?= $o->nomeCliente ?>
+                                    <?= esc($o->nomeCliente) ?>
                                 </td>
 
                                 <td><?php if ($o->dataFinal != null) {
@@ -636,12 +636,12 @@ function responsiveFonts() {
                                 } ?></td>
                                 
                                 <td>
-                                    <span class="badge" style="background-color: <?= $cor ?>; border-color: <?= $cor ?>;"><?= $o->status ?></span>
+                                    <span class="badge" style="background-color: <?= esc_css($cor) ?>; border-color: <?= esc_css($cor) ?>;"><?= esc($o->status) ?></span>
                                 </td>
 
                                 <td>
                                     <?php if ($this->permission->checkPermission($this->session->userdata('permissao'), 'vOs')) : ?>
-                                        <a href="<?= base_url() ?>index.php/os/visualizar/<?= $o->idOs ?>" class="btn-nwe tip-top" title="Visualizar">
+                                        <a href="<?= base_url() ?>index.php/os/visualizar/<?= esc($o->idOs) ?>" class="btn-nwe tip-top" title="Visualizar">
                                             <i class="bx bx-show"></i> </a>
                                     <?php endif ?>
                                 </td>
@@ -712,11 +712,11 @@ function responsiveFonts() {
                             ?>
                             <tr>
                                 <td>
-                                    <?= $o->idOs ?>
+                                    <?= esc($o->idOs) ?>
                                 </td>
 
                                 <td class="cli1">
-                                    <?= $o->nomeCliente ?>
+                                    <?= esc($o->nomeCliente) ?>
                                 </td>
 
                                 <td><?php if ($o->dataFinal != null) {
@@ -726,12 +726,12 @@ function responsiveFonts() {
                                 } ?></td>
                                 
                                 <td>
-                                    <span class="badge" style="background-color: <?= $cor ?>; border-color: <?= $cor ?>;"><?= $o->status ?></span>
+                                    <span class="badge" style="background-color: <?= esc_css($cor) ?>; border-color: <?= esc_css($cor) ?>;"><?= esc($o->status) ?></span>
                                 </td>
 
                                 <td>
                                     <?php if ($this->permission->checkPermission($this->session->userdata('permissao'), 'vOs')) : ?>
-                                        <a href="<?= base_url() ?>index.php/os/visualizar/<?= $o->idOs ?>" class="btn-nwe tip-top" title="Visualizar">
+                                        <a href="<?= base_url() ?>index.php/os/visualizar/<?= esc($o->idOs) ?>" class="btn-nwe tip-top" title="Visualizar">
                                             <i class="bx bx-show"></i> </a>
                                     <?php endif ?>
                                 </td>
@@ -801,11 +801,11 @@ function responsiveFonts() {
                             ?>
                             <tr>
                                 <td>
-                                    <?= $o->idOs ?>
+                                    <?= esc($o->idOs) ?>
                                 </td>
 
                                 <td class="cli1">
-                                    <?= $o->nomeCliente ?>
+                                    <?= esc($o->nomeCliente) ?>
                                 </td>
 
                                 <td><?php if ($o->dataFinal != null) {
@@ -815,12 +815,12 @@ function responsiveFonts() {
                                 } ?></td>
                                 
                                 <td>
-                                    <span class="badge" style="background-color: <?= $cor ?>; border-color: <?= $cor ?>;"><?= $o->status ?></span>
+                                    <span class="badge" style="background-color: <?= esc_css($cor) ?>; border-color: <?= esc_css($cor) ?>;"><?= esc($o->status) ?></span>
                                 </td>
 
                                 <td>
                                     <?php if ($this->permission->checkPermission($this->session->userdata('permissao'), 'vOs')) : ?>
-                                        <a href="<?= base_url() ?>index.php/os/visualizar/<?= $o->idOs ?>" class="btn-nwe tip-top" title="Visualizar">
+                                        <a href="<?= base_url() ?>index.php/os/visualizar/<?= esc($o->idOs) ?>" class="btn-nwe tip-top" title="Visualizar">
                                             <i class="bx bx-show"></i> </a>
                                     <?php endif ?>
                                 </td>
@@ -890,10 +890,10 @@ function responsiveFonts() {
                             ?>
                             <tr>
                                 <td>
-                                    <?= $o->idOs ?>
+                                    <?= esc($o->idOs) ?>
                                 </td>
                                 <td class="cli1">
-                                    <?= $o->nomeCliente ?>
+                                    <?= esc($o->nomeCliente) ?>
                                 </td>
 
                                 <td><?php if ($o->dataFinal != null) {
@@ -903,11 +903,11 @@ function responsiveFonts() {
                                 } ?></td>
 
                                     <td>
-                                        <span class="badge" style="background-color: <?= $cor ?>; border-color: <?= $cor ?>;"><?= $o->status ?></span>
+                                        <span class="badge" style="background-color: <?= esc_css($cor) ?>; border-color: <?= esc_css($cor) ?>;"><?= esc($o->status) ?></span>
                                     </td>
                                 <td>
                                     <?php if ($this->permission->checkPermission($this->session->userdata('permissao'), 'vOs')) : ?>
-                                        <a href="<?= base_url() ?>index.php/os/visualizar/<?= $o->idOs ?>" class="btn-nwe tip-top" title="Visualizar">
+                                        <a href="<?= base_url() ?>index.php/os/visualizar/<?= esc($o->idOs) ?>" class="btn-nwe tip-top" title="Visualizar">
                                             <i class="bx bx-show"></i> </a>
                                     <?php endif ?>
                                 </td>
@@ -977,22 +977,22 @@ function responsiveFonts() {
                             ?>
                             <tr>
                                 <td>
-                                    <?= $v->idVendas ?>
+                                    <?= esc($v->idVendas) ?>
                                 </td>
 
                                 <td class="cli1">
-                                    <?= $v->nomeCliente ?>
+                                    <?= esc($v->nomeCliente) ?>
                                 </td>
                                 <td>
                                     <?= date('d/m/Y', strtotime($v->dataVenda)) ?>
                                 </td>
                                 
                                     <td>
-                                        <span class="badge" style="background-color: <?= $cor ?>; border-color: <?= $cor ?>;"><?= $v->status ?></span>
+                                        <span class="badge" style="background-color: <?= esc_css($cor) ?>; border-color: <?= esc_css($cor) ?>;"><?= esc($v->status) ?></span>
                                     </td>
                                 <td>
                                     <?php if ($this->permission->checkPermission($this->session->userdata('permissao'), 'vVenda')) : ?>
-                                        <a href="<?= base_url() ?>index.php/vendas/visualizar/<?= $v->idVendas ?>" class="btn-nwe tip-top" title="Visualizar">
+                                        <a href="<?= base_url() ?>index.php/vendas/visualizar/<?= esc($v->idVendas) ?>" class="btn-nwe tip-top" title="Visualizar">
                                             <i class="bx bx-show"></i> </a>
                                    
                                     <?php endif ?>
@@ -1030,17 +1030,17 @@ function responsiveFonts() {
                             <tr>
                                 <td>
                                     <?php if ($lancamento->tipo == 'receita'): ?>
-                                        <span class="label label-success"><b><?php echo ucfirst($lancamento->tipo); ?></b></span>
+                                        <span class="label label-success"><b><?= ucfirst($lancamento->tipo) ?></b></span>
                                     <?php elseif ($lancamento->tipo == 'despesa'): ?>
-                                        <span class="label label-important"><b><?php echo ucfirst($lancamento->tipo); ?></b></span>
+                                        <span class="label label-important"><b><?= ucfirst($lancamento->tipo) ?></b></span>
                                     <?php else: ?>
-                                        <?php echo ucfirst($lancamento->tipo); ?>
+                                        <?= ucfirst($lancamento->tipo) ?>
                                     <?php endif; ?>
                                 </td>
-                                <td class="text-truncate"><?php echo $lancamento->cliente_fornecedor; ?></td>
-                                <td class="text-truncate"><?php echo $lancamento->descricao; ?></td>
-                                <td><?php echo date_format(date_create($lancamento->data_vencimento), 'd/m/Y'); ?></td>
-                                <td>R$ <?php echo number_format($lancamento->valor_desconto, 2, ',', '.'); ?></td>
+                                <td class="text-truncate"><?= esc($lancamento->cliente_fornecedor) ?></td>
+                                <td class="text-truncate"><?= esc($lancamento->descricao) ?></td>
+                                <td><?= date_format(date_create($lancamento->data_vencimento), 'd/m/Y') ?></td>
+                                <td>R$ <?= number_format($lancamento->valor_desconto, 2, ',', '.') ?></td>
                             </tr>
                         <?php endforeach; ?>
                     <?php else: ?>
@@ -1074,26 +1074,26 @@ function responsiveFonts() {
                             <?php foreach ($produtos as $p) : ?>
                                 <tr>
                                     <td>
-                                        <?= $p->idProdutos ?>
+                                        <?= esc($p->idProdutos) ?>
                                     </td>
                                     <td class="cli1">
-                                        <?= $p->descricao ?>
+                                        <?= esc($p->descricao) ?>
                                     </td>
                                     <td>R$
-                                        <?= $p->precoVenda ?>
+                                        <?= esc($p->precoVenda) ?>
                                     </td>
                                     <td>
-                                        <?= $p->estoque ?>
+                                        <?= esc($p->estoque) ?>
                                     </td>
                                     <td class="ph3">
-                                        <?= $p->estoqueMinimo ?>
+                                        <?= esc($p->estoqueMinimo) ?>
                                     </td>
                                     <td>
                                         <?php if ($this->permission->checkPermission($this->session->userdata('permissao'), 'eProduto')) : ?>
-                                            <a href="<?= base_url() ?>index.php/produtos/editar/<?= $p->idProdutos ?>" class="btn-nwe3 tip-top" title="Editar">
+                                            <a href="<?= base_url() ?>index.php/produtos/editar/<?= esc($p->idProdutos) ?>" class="btn-nwe3 tip-top" title="Editar">
                                                 <i class="bx bx-edit"></i>
                                             </a>
-                                            <a href="#atualizar-estoque" role="button" data-toggle="modal" produto="<?= $p->idProdutos ?>" estoque="<?= $p->estoque ?>" class="btn-nwe5 tip-top" title="Atualizar Estoque">
+                                            <a href="#atualizar-estoque" role="button" data-toggle="modal" produto="<?= esc($p->idProdutos) ?>" estoque="<?= esc($p->estoque) ?>" class="btn-nwe5 tip-top" title="Atualizar Estoque">
                                                 <i class="bx bx-plus-circle"></i></a>
                                         <?php endif; ?>
                                     </td>
@@ -1151,7 +1151,7 @@ function responsiveFonts() {
 
 <!-- Modal Excluir Os -->
 <div id="modal-excluir-os" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form action="<?php echo base_url() ?>index.php/os/excluir" method="post">
+    <form action="<?= base_url() ?>index.php/os/excluir" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h5 id="myModalLabel">Excluir OS</h5>
@@ -1169,7 +1169,7 @@ function responsiveFonts() {
 
 <!-- Modal Estoque -->
 <div id="atualizar-estoque" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form action="<?php echo base_url() ?>index.php/produtos/atualizar_estoque" method="post" id="formEstoque">
+    <form action="<?= base_url() ?>index.php/produtos/atualizar_estoque" method="post" id="formEstoque">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h5 id="myModalLabel"><i class="fas fa-plus-square"></i> Atualizar Estoque</h5>
@@ -1197,7 +1197,7 @@ function responsiveFonts() {
     </form>
 </div>
 
-<script src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
 <!-- Modal Estoque-->
 <script type="text/javascript">
     $(document).ready(function() {
@@ -1256,11 +1256,11 @@ function responsiveFonts() {
             eventClick: function(info) {
                 var eventObj = info.event.extendedProps;
                 $('#modalId').html(eventObj.id);
-                $('#modalIdVisualizar').attr("href", "<?php echo base_url(); ?>index.php/os/visualizar/" + eventObj.id);
+                $('#modalIdVisualizar').attr("href", "<?= base_url() ?>index.php/os/visualizar/" + eventObj.id);
                 if (eventObj.editar) {
                     $('#modalIdEditar').show();
                     $('#linkExcluir').show();
-                    $('#modalIdEditar').attr("href", "<?php echo base_url(); ?>index.php/os/editar/" + eventObj.id);
+                    $('#modalIdEditar').attr("href", "<?= base_url() ?>index.php/os/editar/" + eventObj.id);
                     $('#modalIdExcluir').val(eventObj.id);
                 } else {
                     $('#modalIdEditar').hide();
diff --git a/application/views/mapos/pesquisa.php b/application/views/mapos/pesquisa.php
index 3735a10ee..0fad4e1fc 100644
--- a/application/views/mapos/pesquisa.php
+++ b/application/views/mapos/pesquisa.php
@@ -1,6 +1,6 @@
  <div class="span12" style="margin-left: 0; margin-top: 0">
     <div class="span12" style="margin-left: 0">
-        <form action="<?php echo current_url() ?>">
+        <form action="<?= current_url() ?>">
             <div class="span10" style="margin-left: 0">
                 <input type="text" class="span12" name="termo" placeholder="Digite o termo a pesquisar"/>
             </div>
diff --git a/application/views/os/adicionarOs.php b/application/views/os/adicionarOs.php
index 6c00fe5ea..165d34b1c 100644
--- a/application/views/os/adicionarOs.php
+++ b/application/views/os/adicionarOs.php
@@ -1,12 +1,12 @@
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
 
-<link rel="stylesheet" href="<?php echo base_url() ?>assets/trumbowyg/ui/trumbowyg.css">
-<script type="text/javascript" src="<?php echo base_url() ?>assets/trumbowyg/trumbowyg.js"></script>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/trumbowyg/langs/pt_br.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/trumbowyg/ui/trumbowyg.css">
+<script type="text/javascript" src="<?= base_url() ?>assets/trumbowyg/trumbowyg.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/trumbowyg/langs/pt_br.js"></script>
 
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/custom.css" />
+<link rel="stylesheet" href="<?= base_url() ?>assets/css/custom.css" />
 
 <div class="row-fluid" style="margin-top:0">
     <div class="span12">
@@ -27,7 +27,7 @@
                                     <div class="span12 alert alert-danger" id="divInfo" style="padding: 1%;">Dados incompletos, verifique os campos com asterisco ou se selecionou corretamente cliente, responsável e garantia.<br />Ou se tem um cliente e um termo de garantia cadastrado.</div>
                                 <?php
                                 } ?>
-                                <form action="<?php echo current_url(); ?>" method="post" id="formOs">
+                                <form action="<?= current_url() ?>" method="post" id="formOs">
                                     <div class="span12" style="padding: 1%">
                                         <div class="span6">
                                             <label for="cliente">Cliente<span class="required">*</span></label>
@@ -57,7 +57,7 @@
                                         </div>
                                         <div class="span3">
                                             <label for="dataInicial">Data Inicial<span class="required">*</span></label>
-                                            <input id="dataInicial" autocomplete="off" class="span12 datepicker" type="text" name="dataInicial" value="<?php echo date('d/m/Y'); ?>" />
+                                            <input id="dataInicial" autocomplete="off" class="span12 datepicker" type="text" name="dataInicial" value="<?= date('d/m/Y') ?>" />
                                         </div>
                                         <div class="span3">
                                             <label for="dataFinal">Data Final<span class="required">*</span></label>
@@ -66,7 +66,7 @@
                                         <div class="span3">
                                             <label for="garantia">Garantia (dias)</label>
                                             <input id="garantia" type="number" placeholder="Status s/g inserir nº/0" min="0" max="9999" class="span12" name="garantia" value="" />
-                                            <?php echo form_error('garantia'); ?>
+                                            <?= form_error('garantia') ?>
                                             <label for="termoGarantia">Termo Garantia</label>
                                             <input id="termoGarantia" class="span12" type="text" name="termoGarantia" value="" />
                                             <input id="garantias_id" class="span12" type="hidden" name="garantias_id" value="" />
@@ -100,7 +100,7 @@
                                         <div class="span12" style="display:flex; justify-content: center;">
                                             <button class="button btn btn-success" id="btnContinuar">
                                               <span class="button__icon"><i class='bx bx-chevrons-right'></i></span><span class="button__text2">Continuar</span></button>
-                                            <a href="<?php echo base_url() ?>index.php/os" class="button btn btn-mini btn-warning" style="max-width: 160px">
+                                            <a href="<?= base_url() ?>index.php/os" class="button btn btn-mini btn-warning" style="max-width: 160px">
                                               <span class="button__icon"><i class="bx bx-undo"></i></span><span class="button__text2">Voltar</span></a>
                                         </div>
                                     </div>
@@ -117,21 +117,21 @@
 <script type="text/javascript">
     $(document).ready(function() {
         $("#cliente").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/os/autoCompleteCliente",
+            source: "<?= base_url() ?>index.php/os/autoCompleteCliente",
             minLength: 1,
             select: function(event, ui) {
                 $("#clientes_id").val(ui.item.id);
             }
         });
         $("#tecnico").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/os/autoCompleteUsuario",
+            source: "<?= base_url() ?>index.php/os/autoCompleteUsuario",
             minLength: 1,
             select: function(event, ui) {
                 $("#usuarios_id").val(ui.item.id);
             }
         });
         $("#termoGarantia").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/os/autoCompleteTermoGarantia",
+            source: "<?= base_url() ?>index.php/os/autoCompleteTermoGarantia",
             minLength: 1,
             select: function(event, ui) {
                 $("#garantias_id").val(ui.item.id);
diff --git a/application/views/os/editarOs.php b/application/views/os/editarOs.php
index 7628fb2f7..71603d28c 100644
--- a/application/views/os/editarOs.php
+++ b/application/views/os/editarOs.php
@@ -1,12 +1,12 @@
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
-<script src="<?php echo base_url() ?>assets/js/sweetalert2.all.min.js"></script>
-<link rel="stylesheet" href="<?php echo base_url() ?>assets/trumbowyg/ui/trumbowyg.css">
-<script type="text/javascript" src="<?php echo base_url() ?>assets/trumbowyg/trumbowyg.js"></script>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/trumbowyg/langs/pt_br.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
+<script src="<?= base_url() ?>assets/js/sweetalert2.all.min.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/trumbowyg/ui/trumbowyg.css">
+<script type="text/javascript" src="<?= base_url() ?>assets/trumbowyg/trumbowyg.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/trumbowyg/langs/pt_br.js"></script>
 
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/custom.css" />
+<link rel="stylesheet" href="<?= base_url() ?>assets/css/custom.css" />
 
 <div class="row-fluid" style="margin-top:0">
     <div class="span12">
@@ -20,7 +20,7 @@
                             <span class="button__icon"><i class='bx bx-dollar'></i></span> <span class="button__text">Faturar</span>
                         </a>
                     <?php } ?>
-                    <a title="Visualizar OS" class="button btn btn-primary" href="<?php echo site_url() ?>/os/visualizar/<?php echo $result->idOs; ?>">
+                    <a title="Visualizar OS" class="button btn btn-primary" href="<?= site_url() ?>/os/visualizar/<?= esc($result->idOs) ?>">
                         <span class="button__icon"><i class="bx bx-show"></i></span><span class="button__text">Visualizar OS</span>
                     </a>
                     <div class="button-container">
@@ -28,14 +28,14 @@
                             <span class="button__icon"><i class="bx bx-printer"></i></span><span class="button__text">Imprimir</span>
                         </a>
                         <div class="cascading-buttons">
-                            <a target="_blank" title="Impressão em Papel A4" class="button btn btn-mini btn-inverse" href="<?php echo site_url() ?>/os/imprimir/<?php echo $result->idOs; ?>">
+                            <a target="_blank" title="Impressão em Papel A4" class="button btn btn-mini btn-inverse" href="<?= site_url() ?>/os/imprimir/<?= esc($result->idOs) ?>">
                                 <span class="button__icon"><i class='bx bx-file'></i></span> <span class="button__text">Papel A4</span>
                             </a>
-                            <a target="_blank" title="Impressão Cupom Não Fical" class="button btn btn-mini btn-inverse" href="<?php echo site_url() ?>/os/imprimirTermica/<?php echo $result->idOs; ?>">
+                            <a target="_blank" title="Impressão Cupom Não Fical" class="button btn btn-mini btn-inverse" href="<?= site_url() ?>/os/imprimirTermica/<?= esc($result->idOs) ?>">
                                 <span class="button__icon"><i class='bx bx-receipt'></i></span> <span class="button__text">Cupom 80mm</span>
                             </a>
                             <?php if ($result->garantias_id) { ?>
-                                <a target="_blank" title="Imprimir Termo de Garantia" class="button btn btn-mini btn-inverse" href="<?php echo site_url() ?>/garantias/imprimirGarantiaOs/<?php echo $result->idOs; ?>">
+                                <a target="_blank" title="Imprimir Termo de Garantia" class="button btn btn-mini btn-inverse" href="<?= site_url() ?>/garantias/imprimirGarantiaOs/<?= esc($result->idOs) ?>">
                                     <span class="button__icon"><i class="bx bx-paperclip"></i></span> <span class="button__text">Termo Garantia</span>
                                 </a>
                             <?php } ?>
@@ -47,12 +47,15 @@
                         $troca = [$result->nomeCliente, $result->idOs, $result->status, 'R$ ' . ($result->desconto != 0 && $result->valor_desconto != 0 ? number_format($result->valor_desconto, 2, ',', '.') : number_format($totalProdutos + $totalServico, 2, ',', '.')), strip_tags($result->descricaoProduto), ($emitente ? $emitente->nome : ''), ($emitente ? $emitente->telefone : ''), strip_tags($result->observacoes), strip_tags($result->defeito), strip_tags($result->laudoTecnico), date('d/m/Y', strtotime($result->dataFinal)), date('d/m/Y', strtotime($result->dataInicial)), $result->garantia . ' dias'];
                         $texto_de_notificacao = $this->os_model->criarTextoWhats($texto_de_notificacao, $troca);
                         if (!empty($zapnumber)) {
-                            echo '<a title="Via WhatsApp" class="button btn btn-mini btn-success" id="enviarWhatsApp" target="_blank" href="https://wa.me/send?phone=55' . $zapnumber . '&text=' . $texto_de_notificacao . '" ' . ($zapnumber == '' ? 'disabled' : '') . '>
+                            $whatsappUrl = 'https://wa.me/send?phone=55' . rawurlencode($zapnumber) . '&text=' . rawurlencode($texto_de_notificacao);
+                            ?>
+                            <a title="Via WhatsApp" class="button btn btn-mini btn-success" id="enviarWhatsApp" target="_blank" href="<?= esc_url($whatsappUrl) ?>">
                                 <span class="button__icon"><i class="bx bxl-whatsapp"></i></span> <span class="button__text">WhatsApp</span>
-                            </a>';
+                            </a>
+                            <?php
                         }
                     } ?>
-                    <a title="Enviar por E-mail" class="button btn btn-mini btn-warning" href="<?php echo site_url() ?>/os/enviar_email/<?php echo $result->idOs; ?>">
+                    <a title="Enviar por E-mail" class="button btn btn-mini btn-warning" href="<?= site_url() ?>/os/enviar_email/<?= esc($result->idOs) ?>">
                         <span class="button__icon"><i class="bx bx-envelope"></i></span> <span class="button__text">Via E-mail</span>
                     </a>
                 </div>
@@ -70,20 +73,20 @@
                     <div class="tab-content">
                         <div class="tab-pane active" id="tab1">
                             <div class="span12" id="divCadastrarOs">
-                                <form action="<?php echo current_url(); ?>" method="post" id="formOs">
-                                    <?php echo form_hidden('idOs', $result->idOs) ?>
+                                <form action="<?= current_url() ?>" method="post" id="formOs">
+                                    <?= form_hidden('idOs', $result->idOs) ?>
                                     <div class="span12" style="padding: 1%; margin-left: 0">
-                                        <h3>N° OS: <?php echo $result->idOs; ?></h3>
+                                        <h3>N° OS: <?= esc($result->idOs) ?></h3>
                                         <div class="span6" style="margin-left: 0">
                                             <label for="cliente">Cliente<span class="required">*</span></label>
-                                            <input id="cliente" class="span12" type="text" name="cliente" value="<?php echo $result->nomeCliente ?>" />
-                                            <input id="clientes_id" class="span12" type="hidden" name="clientes_id" value="<?php echo $result->clientes_id ?>" />
+                                            <input id="cliente" class="span12" type="text" name="cliente" value="<?= esc($result->nomeCliente) ?>" />
+                                            <input id="clientes_id" class="span12" type="hidden" name="clientes_id" value="<?= esc($result->clientes_id) ?>" />
                                             <input id="valor" type="hidden" name="valor" value="" />
                                         </div>
                                         <div class="span6">
                                             <label for="tecnico">Técnico / Responsável<span class="required">*</span></label>
-                                            <input id="tecnico" class="span12" type="text" name="tecnico" value="<?php echo $result->nome ?>" />
-                                            <input id="usuarios_id" class="span12" type="hidden" name="usuarios_id" value="<?php echo $result->usuarios_id ?>" />
+                                            <input id="tecnico" class="span12" type="text" name="tecnico" value="<?= esc($result->nome) ?>" />
+                                            <input id="usuarios_id" class="span12" type="hidden" name="usuarios_id" value="<?= esc($result->usuarios_id) ?>" />
                                         </div>
                                     </div>
                                     <div class="span12" style="padding: 1%; margin-left: 0">
@@ -121,41 +124,41 @@
                                         </div>
                                         <div class="span3">
                                             <label for="dataInicial">Data Inicial<span class="required">*</span></label>
-                                            <input id="dataInicial" autocomplete="off" class="span12 datepicker" type="text" name="dataInicial" value="<?php echo date('d/m/Y', strtotime($result->dataInicial)); ?>" />
+                                            <input id="dataInicial" autocomplete="off" class="span12 datepicker" type="text" name="dataInicial" value="<?= date('d/m/Y', strtotime($result->dataInicial)) ?>" />
                                         </div>
                                         <div class="span3">
                                             <label for="dataFinal">Data Final<span class="required">*</span></label>
-                                            <input id="dataFinal" autocomplete="off" class="span12 datepicker" type="text" name="dataFinal" value="<?php echo date('d/m/Y', strtotime($result->dataFinal)); ?>" />
+                                            <input id="dataFinal" autocomplete="off" class="span12 datepicker" type="text" name="dataFinal" value="<?= date('d/m/Y', strtotime($result->dataFinal)) ?>" />
                                         </div>
                                         <div class="span3">
                                             <label for="garantia">Garantia (dias)</label>
-                                            <input id="garantia" type="number" placeholder="Status s/g inserir nº/0" min="0" max="9999" class="span12" name="garantia" value="<?php echo $result->garantia ?>" />
-                                            <?php echo form_error('garantia'); ?>
+                                            <input id="garantia" type="number" placeholder="Status s/g inserir nº/0" min="0" max="9999" class="span12" name="garantia" value="<?= esc($result->garantia) ?>" />
+                                            <?= form_error('garantia') ?>
                                             <label for="termoGarantia">Termo Garantia</label>
-                                            <input id="termoGarantia" class="span12" type="text" name="termoGarantia" value="<?php echo $result->refGarantia ?>" />
-                                            <input id="garantias_id" class="span12" type="hidden" name="garantias_id" value="<?php echo $result->garantias_id ?>" />
+                                            <input id="termoGarantia" class="span12" type="text" name="termoGarantia" value="<?= esc($result->refGarantia) ?>" />
+                                            <input id="garantias_id" class="span12" type="hidden" name="garantias_id" value="<?= esc($result->garantias_id) ?>" />
                                         </div>
                                     </div>
                                     <div class="span6" style="padding: 1%; margin-left: 0">
                                         <label for="descricaoProduto"><h4>Descrição Produto/Serviço</h4></label>
-                                        <textarea class="span12 editor" name="descricaoProduto" id="descricaoProduto" cols="30" rows="5"><?php echo $result->descricaoProduto ?></textarea>
+                                        <textarea class="span12 editor" name="descricaoProduto" id="descricaoProduto" cols="30" rows="5"><?= esc($result->descricaoProduto) ?></textarea>
                                     </div>
                                     <div class="span6" style="padding: 1%; margin-left: 0">
                                         <label for="defeito"><h4>Defeito</h4></label>
-                                        <textarea class="span12 editor" name="defeito" id="defeito" cols="30" rows="5"><?php echo $result->defeito ?></textarea>
+                                        <textarea class="span12 editor" name="defeito" id="defeito" cols="30" rows="5"><?= esc($result->defeito) ?></textarea>
                                     </div>
                                     <div class="span6" style="padding: 1%; margin-left: 0">
                                         <label for="observacoes"><h4>Observações</h4></label>
-                                        <textarea class="span12 editor" name="observacoes" id="observacoes" cols="30" rows="5"><?php echo $result->observacoes ?></textarea>
+                                        <textarea class="span12 editor" name="observacoes" id="observacoes" cols="30" rows="5"><?= esc($result->observacoes) ?></textarea>
                                     </div>
                                     <div class="span6" style="padding: 1%; margin-left: 0">
                                         <label for="laudoTecnico"><h4>Laudo Técnico</h4></label>
-                                        <textarea class="span12 editor" name="laudoTecnico" id="laudoTecnico" cols="30" rows="5"><?php echo $result->laudoTecnico ?></textarea>
+                                        <textarea class="span12 editor" name="laudoTecnico" id="laudoTecnico" cols="30" rows="5"><?= esc($result->laudoTecnico) ?></textarea>
                                     </div>
                                     <div class="span12" style="padding: 0; margin-left: 0">
                                         <div class="span12" style="display:flex; justify-content: center;">
                                             <button class="button btn btn-primary" id="btnContinuar"><span class="button__icon"><i class="bx bx-sync"></i></span><span class="button__text2">Atualizar</span></button>
-                                            <a href="<?php echo base_url() ?>index.php/os" class="button btn btn-mini btn-warning"><span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
+                                            <a href="<?= base_url() ?>index.php/os" class="button btn btn-mini btn-warning"><span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
                                         </div>
                                     </div>
                                 </form>
@@ -175,11 +178,11 @@
 }?>
                         <div class="tab-pane" id="tab2">
                             <div class="span12 well" style="padding: 1%; margin-left: 0">
-                                <form id="formDesconto" action="<?php echo base_url(); ?>index.php/os/adicionarDesconto" method="POST">
+                                <form id="formDesconto" action="<?= base_url() ?>index.php/os/adicionarDesconto" method="POST">
                                     <div id="divValorTotal">
                                         <div class="span2">
                                             <label for="">Valor Total Da OS:</label>
-                                            <input class="span12 money" id="valorTotal" name="valorTotal" type="text" data-affixes-stay="true" data-thousands="" data-decimal="." name="valor" value="<?php echo number_format($totals + $total, 2, '.', ''); ?>" readonly />
+                                            <input class="span12 money" id="valorTotal" name="valorTotal" type="text" data-affixes-stay="true" data-thousands="" data-decimal="." name="valor" value="<?= number_format($totals + $total, 2, '.', '') ?>" readonly />
                                         </div>
                                     </div>
                                     <div class="span1">
@@ -192,15 +195,15 @@
                                     </div>
                                     <div class="span3">
                                         <input type="hidden" name="idOs" id="idOs"
-                                            value="<?php echo $result->idOs; ?>" />
+                                            value="<?= esc($result->idOs) ?>" />
                                         <label for="">Desconto</label>
                                         <input style="width: 4em;" id="desconto" name="desconto" type="text"
-                                            placeholder="" maxlength="6" size="2" value="<?= $result->desconto ?>" />
+                                            placeholder="" maxlength="6" size="2" value="<?= esc($result->desconto) ?>" />
                                         <strong><span style="color: red" id="errorAlert"></span></strong>
                                     </div>
                                     <div class="span2">
                                         <label for="">Total com Desconto</label>
-                                        <input class="span12 money" id="resultado" type="text" data-affixes-stay="true" data-thousands="" data-decimal="." name="resultado" value="<?php echo $result->valor_desconto ?>" readonly />
+                                        <input class="span12 money" id="resultado" type="text" data-affixes-stay="true" data-thousands="" data-decimal="." name="resultado" value="<?= esc($result->valor_desconto) ?>" readonly />
                                     </div>
                                     <div class="span2">
                                         <label for="">&nbsp;</label>
@@ -215,10 +218,10 @@
                         <!--Produtos-->
                         <div class="tab-pane" id="tab3">
                             <div class="span12 well" style="padding: 1%; margin-left: 0">
-                                <form id="formProdutos" action="<?php echo base_url() ?>index.php/os/adicionarProduto" method="post">
+                                <form id="formProdutos" action="<?= base_url() ?>index.php/os/adicionarProduto" method="post">
                                     <div class="span6">
                                         <input type="hidden" name="idProduto" id="idProduto" />
-                                        <input type="hidden" name="idOsProduto" id="idOsProduto" value="<?php echo $result->idOs; ?>" />
+                                        <input type="hidden" name="idOsProduto" id="idOsProduto" value="<?= esc($result->idOs) ?>" />
                                         <input type="hidden" name="estoque" id="estoque" value="" />
                                         <label for="">Produto</label>
                                         <input type="text" class="span12" name="produto" id="produto" placeholder="Digite o nome do produto" />
@@ -272,9 +275,9 @@ class="span12" />
                                                 </td>
                                                 <td>
                                                     <div align="center"><strong>R$
-                                                            <?php echo number_format($total, 2, ',', '.'); ?><input
+                                                            <?= number_format($total, 2, ',', '.') ?><input
                                                                 type="hidden" id="total-venda"
-                                                                value="<?php echo number_format($total, 2); ?>"></strong>
+                                                                value="<?= number_format($total, 2) ?>"></strong>
                                                     </div>
                                                 </td>
                                             </tr>
@@ -287,12 +290,12 @@ class="span12" />
                         <!--Serviços-->
                         <div class="tab-pane" id="tab4">
                             <div class="span12 well" style="padding: 1%; margin-left: 0">
-                                <form id="formServicos" action="<?php echo base_url() ?>index.php/os/adicionarServico"
+                                <form id="formServicos" action="<?= base_url() ?>index.php/os/adicionarServico"
                                     method="post">
                                     <div class="span6">
                                         <input type="hidden" name="idServico" id="idServico" />
                                         <input type="hidden" name="idOsServico" id="idOsServico"
-                                            value="<?php echo $result->idOs; ?>" />
+                                            value="<?= esc($result->idOs) ?>" />
                                         <label for="">Serviço</label>
                                         <input type="text" class="span12" name="servico" id="servico"
                                             placeholder="Digite o nome do serviço" />
@@ -350,9 +353,9 @@ class="button__text2">Adicionar</span></button>
                                                 </td>
                                                 <td>
                                                     <div align="center"><strong>R$
-                                                            <?php echo number_format($totals, 2, ',', '.'); ?><input
+                                                            <?= number_format($totals, 2, ',', '.') ?><input
                                                                 type="hidden" id="total-servico"
-                                                                value="<?php echo number_format($totals, 2); ?>"></strong>
+                                                                value="<?= number_format($totals, 2) ?>"></strong>
                                                     </div>
                                                 </td>
                                             </tr>
@@ -370,7 +373,7 @@ class="button__text2">Adicionar</span></button>
                                         accept-charset="utf-8" s method="post">
                                         <div class="span10">
                                             <input type="hidden" name="idOsServico" id="idOsServico"
-                                                value="<?php echo $result->idOs; ?>" />
+                                                value="<?= esc($result->idOs) ?>" />
                                             <label for="">Anexo</label>
                                             <input type="file" class="span12" name="userfile[]" multiple="multiple"
                                                 size="20" />
@@ -486,7 +489,7 @@ class="button__text2">Adicionar anotação</span></a>
             <div class="span12" style="margin-left: 0">
                 <label for="anotacao">Anotação</label>
                 <textarea class="span12" name="anotacao" id="anotacao" cols="30" rows="3"></textarea>
-                <input type="hidden" name="os_id" value="<?php echo $result->idOs; ?>">
+                <input type="hidden" name="os_id" value="<?= esc($result->idOs) ?>">
             </div>
         </div>
         <div class="modal-footer" style="display:flex;justify-content: center">
@@ -499,7 +502,7 @@ class="button__text2">Adicionar anotação</span></a>
 <!-- Modal Faturar-->
 <div id="modal-faturar" class="modal hide fade " tabindex="-1" role="dialog" aria-labelledby="myModalLabel"
     aria-hidden="true">
-    <form id="formFaturar" action="<?php echo current_url() ?>" method="post">
+    <form id="formFaturar" action="<?= current_url() ?>" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h3 id="myModalLabel">Faturar OS</h3>
@@ -510,17 +513,17 @@ class="button__text2">Adicionar anotação</span></a>
             <div class="span12" style="margin-left: 0">
                 <label for="descricao">Descrição</label>
                 <input class="span12" id="descricao" type="text" name="descricao"
-                    value="Fatura de OS Nº: <?php echo $result->idOs; ?> " />
+                    value="Fatura de OS Nº: <?= esc($result->idOs) ?> " />
             </div>
             <div class="span12" style="margin-left: 0">
                 <div class="span12" style="margin-left: 0">
                     <label for="cliente">Cliente*</label>
                     <input class="span12" id="cliente" type="text" name="cliente"
-                        value="<?php echo $result->nomeCliente ?>" />
-                    <input type="hidden" name="clientes_id" id="clientes_id" value="<?php echo $result->clientes_id ?>">
-                    <input type="hidden" name="os_id" id="os_id" value="<?php echo $result->idOs; ?>">
+                        value="<?= esc($result->nomeCliente) ?>" />
+                    <input type="hidden" name="clientes_id" id="clientes_id" value="<?= esc($result->clientes_id) ?>">
+                    <input type="hidden" name="os_id" id="os_id" value="<?= esc($result->idOs) ?>">
                     <input type="hidden" name="tipoDesconto" id="tipoDesconto"
-                        value="<?php echo $result->tipo_desconto; ?>">
+                        value="<?= esc($result->tipo_desconto) ?>">
                 </div>
             </div>
             <div class="span12" style="margin-left: 0">
@@ -529,12 +532,12 @@ class="button__text2">Adicionar anotação</span></a>
                     <input type="hidden" id="tipo" name="tipo" value="receita" />
                     <input class="span12 money" id="valor" type="text" data-affixes-stay="true" data-thousands=""
                         data-decimal="." name="valor"
-                        value="<?php echo number_format($totals + $total, 2, '.', ''); ?>" />
+                        value="<?= number_format($totals + $total, 2, '.', '') ?>" />
                 </div>
                 <div class="span6" style="margin-left: 2;">
                     <label for="valor">Valor Com Desconto*</label>
                     <input class="span12 money" id="faturar-desconto" type="text" name="faturar-desconto"
-                        value="<?php echo number_format($result->valor_desconto, 2, '.', ''); ?> " />
+                        value="<?= number_format($result->valor_desconto, 2, '.', '') ?> " />
                     <strong><span style="color: red" id="resultado"></span></strong>
                 </div>
             </div>
@@ -580,7 +583,7 @@ class="button__text2">Cancelar</span></button>
     </form>
 </div>
 
-<script src="<?php echo base_url(); ?>assets/js/maskmoney.js"></script>
+<script src="<?= base_url() ?>assets/js/maskmoney.js"></script>
 
 <script type="text/javascript">
     function calcDesconto(valor, desconto, tipoDesconto) {
@@ -720,7 +723,7 @@ function validarDesconto(resultado, valor) {
                 } else if (qtdTotalProdutosServicos > 0) {
                     $.ajax({
                         type: "POST",
-                        url: "<?php echo base_url(); ?>index.php/os/faturar",
+                        url: "<?= base_url() ?>index.php/os/faturar",
                         data: dados,
                         dataType: 'json',
                         success: function (data) {
@@ -767,7 +770,7 @@ function validarDesconto(resultado, valor) {
                             text: response.messages
                         });
                         setTimeout(function () {
-                            window.location.href = window.BaseUrl + 'index.php/os/editar/' + <?php echo $result->idOs ?>;
+                            window.location.href = window.BaseUrl + 'index.php/os/editar/' + <?= esc($result->idOs) ?>;
                         }, 2000);
                     } else {
                         Swal.fire({
@@ -823,7 +826,7 @@ function validarDesconto(resultado, valor) {
                 $('#btn-cancelar-faturar').trigger('click');
                 $.ajax({
                     type: "POST",
-                    url: "<?php echo base_url(); ?>index.php/os/faturar",
+                    url: "<?= base_url() ?>index.php/os/faturar",
                     data: dados,
                     dataType: 'json',
                     success: function (data) {
@@ -846,7 +849,7 @@ function validarDesconto(resultado, valor) {
         });
 
         $("#produto").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/os/autoCompleteProduto",
+            source: "<?= base_url() ?>index.php/os/autoCompleteProduto",
             minLength: 2,
             select: function (event, ui) {
                 $("#codDeBarra").val(ui.item.codbar);
@@ -858,7 +861,7 @@ function validarDesconto(resultado, valor) {
         });
 
         $("#servico").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/os/autoCompleteServico",
+            source: "<?= base_url() ?>index.php/os/autoCompleteServico",
             minLength: 2,
             select: function (event, ui) {
                 $("#idServico").val(ui.item.id);
@@ -869,7 +872,7 @@ function validarDesconto(resultado, valor) {
 
 
         $("#cliente").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/os/autoCompleteCliente",
+            source: "<?= base_url() ?>index.php/os/autoCompleteCliente",
             minLength: 2,
             select: function (event, ui) {
                 $("#clientes_id").val(ui.item.id);
@@ -877,7 +880,7 @@ function validarDesconto(resultado, valor) {
         });
 
         $("#tecnico").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/os/autoCompleteUsuario",
+            source: "<?= base_url() ?>index.php/os/autoCompleteUsuario",
             minLength: 2,
             select: function (event, ui) {
                 $("#usuarios_id").val(ui.item.id);
@@ -885,7 +888,7 @@ function validarDesconto(resultado, valor) {
         });
 
         $("#termoGarantia").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/os/autoCompleteTermoGarantia",
+            source: "<?= base_url() ?>index.php/os/autoCompleteTermoGarantia",
             minLength: 1,
             select: function (event, ui) {
                 if (ui.item.id) {
@@ -976,17 +979,17 @@ function validarDesconto(resultado, valor) {
                     $("#divProdutos").html("<div class='progress progress-info progress-striped active'><div class='bar' style='width: 100%'></div></div>");
                     $.ajax({
                         type: "POST",
-                        url: "<?php echo base_url(); ?>index.php/os/adicionarProduto",
+                        url: "<?= base_url() ?>index.php/os/adicionarProduto",
                         data: dados,
                         dataType: 'json',
                         success: function (data) {
                             if (data.result == true) {
-                                $("#divProdutos").load("<?php echo current_url(); ?> #divProdutos");
+                                $("#divProdutos").load("<?= current_url() ?> #divProdutos");
                                 $("#quantidade").val('');
                                 $("#preco").val('');
                                 $("#resultado").val('');
                                 $("#desconto").val('');
-                                $("#divValorTotal").load("<?php echo current_url(); ?> #divValorTotal");
+                                $("#divValorTotal").load("<?= current_url() ?> #divValorTotal");
                                 $("#produto").val('').focus();
                             } else {
                                 Swal.fire({
@@ -1031,17 +1034,17 @@ function validarDesconto(resultado, valor) {
                 $("#divServicos").html("<div class='progress progress-info progress-striped active'><div class='bar' style='width: 100%'></div></div>");
                 $.ajax({
                     type: "POST",
-                    url: "<?php echo base_url(); ?>index.php/os/adicionarServico",
+                    url: "<?= base_url() ?>index.php/os/adicionarServico",
                     data: dados,
                     dataType: 'json',
                     success: function (data) {
                         if (data.result == true) {
-                            $("#divServicos").load("<?php echo current_url(); ?> #divServicos");
+                            $("#divServicos").load("<?= current_url() ?> #divServicos");
                             $("#quantidade_servico").val('');
                             $("#preco_servico").val('');
                             $("#resultado").val('');
                             $("#desconto").val('');
-                            $("#divValorTotal").load("<?php echo current_url(); ?> #divValorTotal");
+                            $("#divValorTotal").load("<?= current_url() ?> #divValorTotal");
                             $("#servico").val('').focus();
                         } else {
                             Swal.fire({
@@ -1073,12 +1076,12 @@ function validarDesconto(resultado, valor) {
 
                 $.ajax({
                     type: "POST",
-                    url: "<?php echo base_url(); ?>index.php/os/adicionarAnotacao",
+                    url: "<?= base_url() ?>index.php/os/adicionarAnotacao",
                     data: dados,
                     dataType: 'json',
                     success: function (data) {
                         if (data.result == true) {
-                            $("#divAnotacoes").load("<?php echo current_url(); ?> #divAnotacoes");
+                            $("#divAnotacoes").load("<?= current_url() ?> #divAnotacoes");
                             $("#anotacao").val('');
                             $('#btn-close-anotacao').trigger('click');
                             $("#divFormAnotacoes").html('');
@@ -1103,7 +1106,7 @@ function validarDesconto(resultado, valor) {
                 $("#divAnexos").html("<div class='progress progress-info progress-striped active'><div class='bar' style='width: 100%'></div></div>");
                 $.ajax({
                     type: "POST",
-                    url: "<?php echo base_url(); ?>index.php/os/anexar",
+                    url: "<?= base_url() ?>index.php/os/anexar",
                     data: dados,
                     mimeType: "multipart/form-data",
                     contentType: false,
@@ -1112,7 +1115,7 @@ function validarDesconto(resultado, valor) {
                     dataType: 'json',
                     success: function (data) {
                         if (data.result == true) {
-                            $("#divAnexos").load("<?php echo current_url(); ?> #divAnexos");
+                            $("#divAnexos").load("<?= current_url() ?> #divAnexos");
                             $("#userfile").val('');
 
                         } else {
@@ -1132,18 +1135,18 @@ function validarDesconto(resultado, valor) {
             var idProduto = $(this).attr('idAcao');
             var quantidade = $(this).attr('quantAcao');
             var produto = $(this).attr('prodAcao');
-            var idOS = "<?php echo $result->idOs ?>"
+            var idOS = <?= esc_js($result->idOs) ?>
             if ((idProduto % 1) == 0) {
                 $("#divProdutos").html("<div class='progress progress-info progress-striped active'><div class='bar' style='width: 100%'></div></div>");
                 $.ajax({
                     type: "POST",
-                    url: "<?php echo base_url(); ?>index.php/os/excluirProduto",
+                    url: "<?= base_url() ?>index.php/os/excluirProduto",
                     data: "idProduto=" + idProduto + "&quantidade=" + quantidade + "&produto=" + produto + "&idOs=" + idOS,
                     dataType: 'json',
                     success: function (data) {
                         if (data.result == true) {
-                            $("#divProdutos").load("<?php echo current_url(); ?> #divProdutos");
-                            $("#divValorTotal").load("<?php echo current_url(); ?> #divValorTotal");
+                            $("#divProdutos").load("<?= current_url() ?> #divProdutos");
+                            $("#divValorTotal").load("<?= current_url() ?> #divValorTotal");
                             $("#resultado").val('');
                             $("#desconto").val('');
 
@@ -1163,18 +1166,18 @@ function validarDesconto(resultado, valor) {
 
         $(document).on('click', '.servico', function (event) {
             var idServico = $(this).attr('idAcao');
-            var idOS = "<?php echo $result->idOs ?>"
+            var idOS = <?= esc_js($result->idOs) ?>
             if ((idServico % 1) == 0) {
                 $("#divServicos").html("<div class='progress progress-info progress-striped active'><div class='bar' style='width: 100%'></div></div>");
                 $.ajax({
                     type: "POST",
-                    url: "<?php echo base_url(); ?>index.php/os/excluirServico",
+                    url: "<?= base_url() ?>index.php/os/excluirServico",
                     data: "idServico=" + idServico + "&idOs=" + idOS,
                     dataType: 'json',
                     success: function (data) {
                         if (data.result == true) {
-                            $("#divServicos").load("<?php echo current_url(); ?> #divServicos");
-                            $("#divValorTotal").load("<?php echo current_url(); ?> #divValorTotal");
+                            $("#divServicos").load("<?= current_url() ?> #divServicos");
+                            $("#divValorTotal").load("<?= current_url() ?> #divValorTotal");
                             $("#resultado").val('');
                             $("#desconto").val('');
 
@@ -1195,18 +1198,18 @@ function validarDesconto(resultado, valor) {
             event.preventDefault();
             var link = $(this).attr('link');
             var id = $(this).attr('imagem');
-            var url = '<?php echo base_url(); ?>index.php/os/excluirAnexo/';
+            var url = '<?= base_url() ?>index.php/os/excluirAnexo/';
             $("#div-visualizar-anexo").html('<img src="' + link + '" alt="">');
             $("#excluir-anexo").attr('link', url + id);
 
-            $("#download").attr('href', "<?php echo base_url(); ?>index.php/os/downloadanexo/" + id);
+            $("#download").attr('href', "<?= base_url() ?>index.php/os/downloadanexo/" + id);
 
         });
 
         $(document).on('click', '#excluir-anexo', function (event) {
             event.preventDefault();
             var link = $(this).attr('link');
-            var idOS = "<?php echo $result->idOs ?>"
+            var idOS = <?= esc_js($result->idOs) ?>
             $('#modal-anexo').modal('hide');
             $("#divAnexos").html("<div class='progress progress-info progress-striped active'><div class='bar' style='width: 100%'></div></div>");
 
@@ -1217,7 +1220,7 @@ function validarDesconto(resultado, valor) {
                 data: "idOs=" + idOS,
                 success: function (data) {
                     if (data.result == true) {
-                        $("#divAnexos").load("<?php echo current_url(); ?> #divAnexos");
+                        $("#divAnexos").load("<?= current_url() ?> #divAnexos");
                     } else {
                         Swal.fire({
                             type: "error",
@@ -1231,17 +1234,17 @@ function validarDesconto(resultado, valor) {
 
         $(document).on('click', '.anotacao', function (event) {
             var idAnotacao = $(this).attr('idAcao');
-            var idOS = "<?php echo $result->idOs ?>"
+            var idOS = <?= esc_js($result->idOs) ?>
             if ((idAnotacao % 1) == 0) {
                 $("#divAnotacoes").html("<div class='progress progress-info progress-striped active'><div class='bar' style='width: 100%'></div></div>");
                 $.ajax({
                     type: "POST",
-                    url: "<?php echo base_url(); ?>index.php/os/excluirAnotacao",
+                    url: "<?= base_url() ?>index.php/os/excluirAnotacao",
                     data: "idAnotacao=" + idAnotacao + "&idOs=" + idOS,
                     dataType: 'json',
                     success: function (data) {
                         if (data.result == true) {
-                            $("#divAnotacoes").load("<?php echo current_url(); ?> #divAnotacoes");
+                            $("#divAnotacoes").load("<?= current_url() ?> #divAnotacoes");
 
                         } else {
                             Swal.fire({
diff --git a/application/views/os/emails/clientenovo.php b/application/views/os/emails/clientenovo.php
index e442fc996..a3b0c78b1 100644
--- a/application/views/os/emails/clientenovo.php
+++ b/application/views/os/emails/clientenovo.php
@@ -130,19 +130,19 @@
                     <table>
                         <tr>
                             <td>
-                                Cliente: <?= $cliente->nomeCliente ?><br>
-                                <?= $cliente->rua ?>, <?= $cliente->numero ?>, <?= $cliente->bairro ?><br>
-                                <?= $cliente->cidade ?> - <?= $cliente->estado ?> <br>
-                                <?= $cliente->email ?> <br>
-                                <?= $cliente->celular ?>
+                                Cliente: <?= esc($cliente->nomeCliente) ?><br>
+                                <?= esc($cliente->rua) ?>, <?= esc($cliente->numero) ?>, <?= esc($cliente->bairro) ?><br>
+                                <?= esc($cliente->cidade) ?> - <?= esc($cliente->estado) ?> <br>
+                                <?= esc($cliente->email) ?> <br>
+                                <?= esc($cliente->celular) ?>
                             </td>
 
                             <td style="text-align: right">
                                 <?= $emitente->nome; ?> <br>
-                                <?= $emitente->rua ?>, <?= $emitente->numero ?>, <?= $emitente->bairro ?><br>
-                                <?= $emitente->cidade ?> - <?= $emitente->uf ?> <br> 
-                                CEP: <?= $emitente->cep ?> <br>
-                                <?= $emitente->telefone ?> <br>
+                                <?= esc($emitente->rua) ?>, <?= esc($emitente->numero) ?>, <?= esc($emitente->bairro) ?><br>
+                                <?= esc($emitente->cidade) ?> - <?= esc($emitente->uf) ?> <br> 
+                                CEP: <?= esc($emitente->cep) ?> <br>
+                                <?= esc($emitente->telefone) ?> <br>
 
                             </td>
                         </tr>
@@ -153,7 +153,7 @@
             <tr class="details">
             
                 <td colspan="4" style="text-align: left">
-                    Caro(a) <b><?= $cliente->nomeCliente ?></b>, 
+                    Caro(a) <b><?= esc($cliente->nomeCliente) ?></b>, 
                     bem-vindo à <?= $emitente->nome; ?>! <br>
 
                 </td>
@@ -162,7 +162,7 @@
             <tr class="details">
                 <td colspan="4" style="text-align: left">
                     Por favor leia as instruções abaixo para enviar seu aparelho para o nosso time técnico: <br><br>
-                    1 - Entre em contato pelo nosso WhatsApp <?= $emitente->telefone ?> e nos informe que vai nos enviar seu aparelho; <br>
+                    1 - Entre em contato pelo nosso WhatsApp <?= esc($emitente->telefone) ?> e nos informe que vai nos enviar seu aparelho; <br>
                     2 - Entre no nosso sistema e crie sua própria Ordem de Serviço, descrevendo o defeito ou serviço a realizar no aparelho, fazendo suas observações; <br>
                     3 - Para criar uma nova Ordem de Serviço, entre no nosso sistema com seu email (usuário) e CPF (senha). Uma vez no sistema, clique em "Ordens de Serviço" e "+Adicionar OS"; <br>
                     4 - Depois da Ordem de Serviço criada, você receberá um e-mail de confirmação e poderá enviar seu aparelho para o endereço que está no cabeçalho deste e-mail. <br>
diff --git a/application/views/os/emails/clientenovonotifica.php b/application/views/os/emails/clientenovonotifica.php
index 9802743b8..21b83f60f 100644
--- a/application/views/os/emails/clientenovonotifica.php
+++ b/application/views/os/emails/clientenovonotifica.php
@@ -128,7 +128,7 @@
             <tr class="details">
             
                 <td colspan="4" style="text-align: left">
-                    Caro <b><?= $usuario->nome ?></b>, <br>
+                    Caro <b><?= esc($usuario->nome) ?></b>, <br>
                     Um novo cliente se cadastrou no sistema. Seguem as informações sobre este cliente: <br>
                 </td>
 
@@ -153,15 +153,15 @@
                     Celular:
                 </td>
                 <td  style="text-align: left">
-                    <b> <?= $cliente->nomeCliente ?> </b><br>
-                    <?= $cliente->documento ?><br>
-                    <?= $cliente->rua ?>, <?= $cliente->numero ?> <br>
-                    <?= $cliente->complemento ?> <br>
-                    <?= $cliente->bairro ?><br>
-                    <?= $cliente->cidade ?>/<?= $cliente->estado ?> <br>
-                    <?= $cliente->cep ?> <br>
-                    <?= $cliente->email ?> <br>
-                    <?= $cliente->celular ?>
+                    <b> <?= esc($cliente->nomeCliente) ?> </b><br>
+                    <?= esc($cliente->documento) ?><br>
+                    <?= esc($cliente->rua) ?>, <?= esc($cliente->numero) ?> <br>
+                    <?= esc($cliente->complemento) ?> <br>
+                    <?= esc($cliente->bairro) ?><br>
+                    <?= esc($cliente->cidade) ?>/<?= esc($cliente->estado) ?> <br>
+                    <?= esc($cliente->cep) ?> <br>
+                    <?= esc($cliente->email) ?> <br>
+                    <?= esc($cliente->celular) ?>
                 </td>
             </tr>
 
diff --git a/application/views/os/emails/os.php b/application/views/os/emails/os.php
index e753fab33..41053385a 100644
--- a/application/views/os/emails/os.php
+++ b/application/views/os/emails/os.php
@@ -116,7 +116,7 @@
                                 <img src="<?= $emitente->url_logo; ?>" style="width:100%; max-width:120px;">
                             </td>
                             <td style="text-align: right">
-                                OS #: <?= $result->idOs ?><br>
+                                OS #: <?= esc($result->idOs) ?><br>
                                 Data Inicial: <?= date('d/m/Y', strtotime($result->dataInicial)); ?> <br>
                                 Data Final: <?= $result->dataFinal ? date('d/m/Y', strtotime($result->dataFinal)) : ''; ?>
                             </td>
@@ -130,18 +130,18 @@
                     <table>
                         <tr>
                             <td>
-                                Cliente: <?= $result->nomeCliente ?><br>
-                                <?= $result->rua ?>, <?= $result->numero ?>, <?= $result->bairro ?><br>
-                                <?= $result->cidade ?> - <?= $result->estado ?> <br>
-                                <?= $result->email ?> <br>
-                                <?= $result->celular_cliente ?>
+                                Cliente: <?= esc($result->nomeCliente) ?><br>
+                                <?= esc($result->rua) ?>, <?= esc($result->numero) ?>, <?= esc($result->bairro) ?><br>
+                                <?= esc($result->cidade) ?> - <?= esc($result->estado) ?> <br>
+                                <?= esc($result->email) ?> <br>
+                                <?= esc($result->celular_cliente) ?>
                             </td>
 
                             <td style="text-align: right">
                                 <?= $emitente->nome; ?> <br>
-                                <?= $emitente->rua ?>, <?= $emitente->numero ?>, <?= $emitente->bairro ?><br>
-                                <?= $emitente->cidade ?> - <?= $emitente->uf ?> CEP: <?= $emitente->cep ?> <br>
-                                Responsável: <?= $result->nome ?>
+                                <?= esc($emitente->rua) ?>, <?= esc($emitente->numero) ?>, <?= esc($emitente->bairro) ?><br>
+                                <?= esc($emitente->cidade) ?> - <?= esc($emitente->uf) ?> CEP: <?= esc($emitente->cep) ?> <br>
+                                Responsável: <?= esc($result->nome) ?>
                             </td>
                         </tr>
                     </table>
@@ -153,7 +153,7 @@
                     Status
                 </td>
                 <td colspan="2" style="text-align: center">
-                    <?= $result->status ?>
+                    <?= esc($result->status) ?>
                 </td>
             </tr>
 
@@ -164,7 +164,7 @@
                     </td>
 
                     <td colspan="2" style="text-align: center">
-                        <?= $result->garantia ?>
+                        <?= esc($result->garantia) ?>
                     </td>
                 </tr>
             <?php } ?>
diff --git a/application/views/os/imprimirOs.php b/application/views/os/imprimirOs.php
index 305eecd54..3d4511b04 100644
--- a/application/views/os/imprimirOs.php
+++ b/application/views/os/imprimirOs.php
@@ -6,7 +6,7 @@
 <html lang="pt-br">
 
 <head>
-    <title><?= $this->config->item('app_name') ?> - <?= $result->idOs ?> - <?= $result->nomeCliente ?></title>
+    <title><?= esc($this->config->item('app_name')) ?> - <?= esc($result->idOs) ?> - <?= esc($result->nomeCliente) ?></title>
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap5.3.2.min.css" />
     <link rel="stylesheet" href="<?= base_url() ?>assets/font-awesome/css/font-awesome.css" />
@@ -18,26 +18,26 @@
             <header>
                 <?php if ($emitente == null) : ?>
                     <div class="alert alert-danger" role="alert">
-                        Você precisa configurar os dados do emitente. >>> <a href="<?=base_url()?>index.php/mapos/emitente">Configurar</a>
+                        Você precisa configurar os dados do emitente. >>> <a href="<?= base_url() ?>index.php/mapos/emitente">Configurar</a>
                     </div>
                 <?php else : ?>
                     <div class="imgLogo" class="align-middle">
-                        <img src="<?= $emitente->url_logo ?>" class="img-fluid" style="width:140px;">
+                        <img src="<?= esc($emitente->url_logo) ?>" class="img-fluid" style="width:140px;">
                     </div>
                     <div class="emitente">
-                        <span style="font-size: 16px;"><b><?= $emitente->nome ?></b></span></br>
+                        <span style="font-size: 16px;"><b><?= esc($emitente->nome) ?></b></span></br>
                         <?php if ($emitente->cnpj != "00.000.000/0000-00") : ?>
-                            <span class="align-middle">CNPJ: <?= $emitente->cnpj ?></span></br>
+                            <span class="align-middle">CNPJ: <?= esc($emitente->cnpj) ?></span></br>
                         <?php endif; ?>
                         <span class="align-middle">
-                            <?= $emitente->rua.', '.$emitente->numero.', '.$emitente->bairro ?><br>
-                            <?= $emitente->cidade.' - '.$emitente->uf.' - '.$emitente->cep ?>
+                            <?= esc($emitente->rua) . ', ' . esc($emitente->numero) . ', ' . esc($emitente->bairro) ?><br>
+                            <?= esc($emitente->cidade) . ' - ' . esc($emitente->uf) . ' - ' . esc($emitente->cep) ?>
                         </span>
                     </div>
                     <div class="contatoEmitente">
-                        <span style="font-weight: bold;">Tel: <?= $emitente->telefone ?></span></br>
-                        <span style="font-weight: bold;"><?= $emitente->email ?></span></br>
-                        <span style="word-break: break-word;">Responsável: <b><?= $result->nome ?></b></span>
+                        <span style="font-weight: bold;">Tel: <?= esc($emitente->telefone) ?></span></br>
+                        <span style="font-weight: bold;"><?= esc($emitente->email) ?></span></br>
+                        <span style="word-break: break-word;">Responsável: <b><?= esc($result->nome) ?></b></span>
                     </div>
                 <?php endif; ?>
             </header>
@@ -66,11 +66,11 @@
                             </thead>
                             <tbody>
                                 <tr>
-                                    <td class="text-center"><?= $result->status ?></td>
+                                    <td class="text-center"><?= esc($result->status) ?></td>
                                     <td class="text-center"><?= date('d/m/Y', strtotime($result->dataInicial)) ?></td>
                                     <td class="text-center"><?= $result->dataFinal ? date('d/m/Y', strtotime($result->dataFinal)) : '' ?></td>
                                     <?php if ($result->garantia) : ?>
-                                        <td class="text-center"><?= $result->garantia . ' dia(s)' ?></td>
+                                        <td class="text-center"><?= esc($result->garantia) . ' dia(s)' ?></td>
                                     <?php endif; ?>
                                     <?php if (in_array($result->status, ['Finalizado', 'Faturado'])) : ?>
                                         <td class="text-center"><?= dateInterval($result->dataFinal, $result->garantia) ?></td>
@@ -84,15 +84,15 @@
                 <div class="subtitle">DADOS DO CLIENTE</div>
                 <div class="dados">
                     <div>
-                        <span><b><?= $result->nomeCliente ?></b></span><br />
-                        <span>CPF/CNPJ: <?= $result->documento ?></span><br />
-                        <span><?= $result->contato_cliente.' '.$result->telefone ?><?= $result->telefone && $result->celular ? ' / '.$result->celular : $result->celular ?></span><br />
-                        <span><?= $result->email ?></span><br />
+                        <span><b><?= esc($result->nomeCliente) ?></b></span><br />
+                        <span>CPF/CNPJ: <?= esc($result->documento) ?></span><br />
+                        <span><?= esc($result->contato_cliente) . ' ' . esc($result->telefone) ?><?= ($result->telefone && $result->celular ? ' / ' . esc($result->celular) : esc($result->celular)) ?></span><br />
+                        <span><?= esc($result->email) ?></span><br />
                     </div>
                     <div style="text-align: right;">
-                        <span><?= $result->rua.', '.$result->numero.', '.$result->bairro ?></span><br />
-                        <span><?= $result->complemento.' - '.$result->cidade.' - '.$result->estado ?></span><br />
-                        <span>CEP: <?= $result->cep ?></span><br />
+                        <span><?= esc($result->rua) . ', ' . esc($result->numero) . ', ' . esc($result->bairro) ?></span><br />
+                        <span><?= esc($result->complemento) . ' - ' . esc($result->cidade) . ' - ' . esc($result->estado) ?></span><br />
+                        <span>CEP: <?= esc($result->cep) ?></span><br />
                     </div>
                 </div>
 
@@ -207,10 +207,10 @@
                     <div class="pagamento">
                         <div class="qrcode">
                             <?php if ($this->data['configuration']['pix_key']) : ?>
-                                <div><img width="130px" src="<?= $qrCode ?>" alt="QR Code de Pagamento" /></div>
+                                <div><img width="130px" src="<?= esc($qrCode) ?>" alt="QR Code de Pagamento" /></div>
                                 <div style="display: flex; flex-wrap: wrap; align-content: center;">
                                     <div style="width: 100%; text-align:center;"><i class="fas fa-camera"></i><br />Escaneie o QRCode ao lado para pagar por Pix</div>
-                                    <div class="chavePix">Chave Pix: <b><?= $chaveFormatada ?></b></div>
+                                    <div class="chavePix">Chave Pix: <b><?= esc($chaveFormatada) ?></b></div>
                                 </div>
                             <?php else: ?>
                                 <div></div>
@@ -270,26 +270,26 @@
                 <header>
                     <?php if ($emitente == null) : ?>
                         <div class="alert alert-danger" role="alert">
-                            Você precisa configurar os dados do emitente. >>> <a href="<?=base_url()?>index.php/mapos/emitente">Configurar</a>
+                            Você precisa configurar os dados do emitente. >>> <a href="<?= base_url() ?>index.php/mapos/emitente">Configurar</a>
                         </div>
                     <?php else : ?>
                         <div class="imgLogo" class="align-middle">
-                            <img src="<?= $emitente->url_logo ?>" class="img-fluid" style="width:140px;">
+                            <img src="<?= esc($emitente->url_logo) ?>" class="img-fluid" style="width:140px;">
                         </div>
                         <div class="emitente">
-                            <span style="font-size: 16px;"><b><?= $emitente->nome ?></b></span></br>
+                            <span style="font-size: 16px;"><b><?= esc($emitente->nome) ?></b></span></br>
                             <?php if ($emitente->cnpj != "00.000.000/0000-00") : ?>
-                                <span class="align-middle">CNPJ: <?= $emitente->cnpj ?></span></br>
+                                <span class="align-middle">CNPJ: <?= esc($emitente->cnpj) ?></span></br>
                             <?php endif; ?>
                             <span class="align-middle">
-                                <?= $emitente->rua.', '.$emitente->numero.', '.$emitente->bairro ?><br>
-                                <?= $emitente->cidade.' - '.$emitente->uf.' - '.$emitente->cep ?>
+                                <?= esc($emitente->rua) . ', ' . esc($emitente->numero) . ', ' . esc($emitente->bairro) ?><br>
+                                <?= esc($emitente->cidade) . ' - ' . esc($emitente->uf) . ' - ' . esc($emitente->cep) ?>
                             </span>
                         </div>
                         <div class="contatoEmitente">
-                            <span style="font-weight: bold;">Tel: <?= $emitente->telefone ?></span></br>
-                            <span style="font-weight: bold;"><?= $emitente->email ?></span></br>
-                            <span style="word-break: break-word;">Responsável: <b><?= $result->nome ?></b></span>
+                            <span style="font-weight: bold;">Tel: <?= esc($emitente->telefone) ?></span></br>
+                            <span style="font-weight: bold;"><?= esc($emitente->email) ?></span></br>
+                            <span style="word-break: break-word;">Responsável: <b><?= esc($result->nome) ?></b></span>
                         </div>
                     <?php endif; ?>
                 </header>
@@ -321,11 +321,11 @@
                                 </thead>
                                 <tbody>
                                     <tr>
-                                        <td class="text-center"><?= $result->status ?></td>
+                                        <td class="text-center"><?= esc($result->status) ?></td>
                                         <td class="text-center"><?= date('d/m/Y', strtotime($result->dataInicial)) ?></td>
                                         <td class="text-center"><?= $result->dataFinal ? date('d/m/Y', strtotime($result->dataFinal)) : '' ?></td>
                                         <?php if ($result->garantia) : ?>
-                                            <td class="text-center"><?= $result->garantia . ' dia(s)' ?></td>
+                                            <td class="text-center"><?= esc($result->garantia) . ' dia(s)' ?></td>
                                         <?php endif; ?>
                                         <?php if (in_array($result->status, ['Finalizado', 'Faturado'])) : ?>
                                             <td class="text-center"><?= dateInterval($result->dataFinal, $result->garantia) ?></td>
@@ -339,15 +339,15 @@
                     <div class="subtitle">DADOS DO CLIENTE</div>
                     <div class="dados">
                         <div>
-                            <span><b><?= $result->nomeCliente ?></b></span><br />
-                            <span>CPF/CNPJ: <?= $result->documento ?></span><br />
-                            <span><?= $result->contato_cliente.' '.$result->telefone ?><?= $result->telefone && $result->celular ? ' / '.$result->celular : $result->celular ?></span><br />
-                            <span><?= $result->email ?></span><br />
+                            <span><b><?= esc($result->nomeCliente) ?></b></span><br />
+                            <span>CPF/CNPJ: <?= esc($result->documento) ?></span><br />
+                            <span><?= esc($result->contato_cliente) . ' ' . esc($result->telefone) ?><?= ($result->telefone && $result->celular ? ' / ' . esc($result->celular) : esc($result->celular)) ?></span><br />
+                            <span><?= esc($result->email) ?></span><br />
                         </div>
                         <div style="text-align: right;">
-                            <span><?= $result->rua.', '.$result->numero.', '.$result->bairro ?></span><br />
-                            <span><?= $result->complemento.' - '.$result->cidade.' - '.$result->estado ?></span><br />
-                            <span>CEP: <?= $result->cep ?></span><br />
+                            <span><?= esc($result->rua) . ', ' . esc($result->numero) . ', ' . esc($result->bairro) ?></span><br />
+                            <span><?= esc($result->complemento) . ' - ' . esc($result->cidade) . ' - ' . esc($result->estado) ?></span><br />
+                            <span>CEP: <?= esc($result->cep) ?></span><br />
                         </div>
                     </div>
 
@@ -462,10 +462,10 @@
                         <div class="pagamento">
                             <div class="qrcode">
                                 <?php if ($this->data['configuration']['pix_key']) : ?>
-                                    <div><img width="130px" src="<?= $qrCode ?>" alt="QR Code de Pagamento" /></div>
+                                    <div><img width="130px" src="<?= esc($qrCode) ?>" alt="QR Code de Pagamento" /></div>
                                     <div style="display: flex; flex-wrap: wrap; align-content: center;">
                                         <div style="width: 100%; text-align:center;"><i class="fas fa-camera"></i><br />Escaneie o QRCode ao lado para pagar por Pix</div>
-                                        <div class="chavePix">Chave Pix: <b><?= $chaveFormatada ?></b></div>
+                                        <div class="chavePix">Chave Pix: <b><?= esc($chaveFormatada) ?></b></div>
                                     </div>
                                 <?php else: ?>
                                     <div></div>
@@ -530,22 +530,22 @@
                         </div>
                     <?php else : ?>
                         <div id="imgLogo" class="align-middle">
-                            <img src="<?= $emitente->url_logo ?>" class="img-fluid" style="width:140px;">
+                            <img src="<?= esc($emitente->url_logo) ?>" class="img-fluid" style="width:140px;">
                         </div>
                         <div style="padding-left: 10px; padding-right: 10px; margin-top: 3px;">
-                            <span style="font-size: 16px;"><b><?= $emitente->nome ?></b></span></br>
+                            <span style="font-size: 16px;"><b><?= esc($emitente->nome) ?></b></span></br>
                             <?php if ($emitente->cnpj != "00.000.000/0000-00") : ?>
-                                <span class="align-middle">CNPJ: <?= $emitente->cnpj ?></span></br>
+                                <span class="align-middle">CNPJ: <?= esc($emitente->cnpj) ?></span></br>
                             <?php endif; ?>
                             <span class="align-middle">
-                                <?= $emitente->rua.', '.$emitente->numero.', '.$emitente->bairro ?><br>
-                                <?= $emitente->cidade.' - '.$emitente->uf.' - '.$emitente->cep ?>
+                                <?= esc($emitente->rua) . ', ' . esc($emitente->numero) . ', ' . esc($emitente->bairro) ?><br>
+                                <?= esc($emitente->cidade) . ' - ' . esc($emitente->uf) . ' - ' . esc($emitente->cep) ?>
                             </span>
                         </div>
                         <div style="text-align: right; max-width: 230px; margin-top: 10px;">
-                            <span style="font-weight: bold;">Tel: <?= $emitente->telefone ?></span></br>
-                            <span style="font-weight: bold;"><?= $emitente->email ?></span></br>
-                            <span style="word-break: break-word;">Responsável: <b><?= $result->nome ?></b></span>
+                            <span style="font-weight: bold;">Tel: <?= esc($emitente->telefone) ?></span></br>
+                            <span style="font-weight: bold;"><?= esc($emitente->email) ?></span></br>
+                            <span style="word-break: break-word;">Responsável: <b><?= esc($result->nome) ?></b></span>
                         </div>
                     <?php endif; ?>
                 </header>
@@ -564,7 +564,7 @@
         $thumb = $a->url.'/thumbs/'.$a->thumb;
         $link  = $a->url.'/'.$a->anexo;
         ?>
-                                        <img src="<?= $link ?>" alt="">
+                                        <img src="<?= esc($link) ?>" alt="">
                             <?php
     endif;
 endforeach;
diff --git a/application/views/os/imprimirOsTermica.php b/application/views/os/imprimirOsTermica.php
index 72744499d..e099b5079 100644
--- a/application/views/os/imprimirOsTermica.php
+++ b/application/views/os/imprimirOsTermica.php
@@ -4,12 +4,12 @@
 <html lang="pt-br">
 
 <head>
-    <title>Map_OS_<?php echo $result->idOs ?>_<?php echo $result->nomeCliente ?></title>
+    <title>Map_OS_<?= esc($result->idOs) ?>_<?= esc($result->nomeCliente) ?></title>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/matrix-style.css" />
-    <link href="<?php echo base_url(); ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/matrix-style.css" />
+    <link href="<?= base_url() ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
     <link href="<?= base_url('assets/css/custom.css'); ?>" rel="stylesheet">
     <link href='http://fonts.googleapis.com/css?family=Open+Sans:400,700,800' rel='stylesheet' type='text/css'>
     <style>
@@ -87,15 +87,15 @@
                             <tbody>
                                 <?php if ($emitente == null) { ?>
                                     <tr>
-                                        <td colspan="5" class="alert">Você precisa configurar os dados do emitente. >>><a href="<?php echo base_url(); ?>index.php/mapos/emitente">Configurar</a>
+                                        <td colspan="5" class="alert">Você precisa configurar os dados do emitente. >>><a href="<?= base_url() ?>index.php/mapos/emitente">Configurar</a>
                                             <<<</td> </tr> <?php } else { ?>
-                                    <td style="width: 25% ;text-align: center" ><img src="<?php echo $emitente->url_logo; ?>" style="max-height: 100px"></td>
+                                    <td style="width: 25% ;text-align: center" ><img src="<?= esc($emitente->url_logo) ?>" style="max-height: 100px"></td>
                                     <tr>
                                         <td colspan="5" style="text-align: center; font-size: 11px;" >
-                                            <span style="font-size: 12px; text-transform: uppercase"><b><?php echo $emitente->nome; ?></b></br></span>
-                                            <?php if ($emitente->cnpj != "00.000.000/0000-00") { ?><span class="icon"><i class="fas fa-fingerprint" style="margin:5px 1px"></i> <?php echo $emitente->cnpj; ?></span></br><?php } ?>
-                                            <span><?php echo $emitente->rua . ', ' . $emitente->numero . '</br>' . $emitente->bairro . ', ' . $emitente->cidade . ' - ' . $emitente->uf; ?></span></br>
-                                            <span><?php echo $emitente->email; ?> - <?php echo $emitente->telefone; ?></span>
+                                            <span style="font-size: 12px; text-transform: uppercase"><b><?= esc($emitente->nome) ?></b></br></span>
+                                            <?php if ($emitente->cnpj != "00.000.000/0000-00") { ?><span class="icon"><i class="fas fa-fingerprint" style="margin:5px 1px"></i> <?= esc($emitente->cnpj) ?></span></br><?php } ?>
+                                            <span><?= $emitente->rua . ', ' . $emitente->numero . '</br>' . $emitente->bairro . ', ' . $emitente->cidade . ' - ' . $emitente->uf ?></span></br>
+                                            <span><?= esc($emitente->email) ?> - <?= esc($emitente->telefone) ?></span>
                                         </td>
                                     </tr>
                                 <?php } ?>
@@ -108,18 +108,18 @@
                                         <ul>
                                             <li>
                                                 <span><b>CLIENTE</b></br></span>
-                                                <span><?php echo $result->nomeCliente ?></br></span>
+                                                <span><?= esc($result->nomeCliente) ?></br></span>
                                                 <?= !empty($result->contato_cliente) ? '<span>' . $result->contato_cliente . ' </span>' : '' ?>
                                                     <?php if ($result->celular_cliente == $result->telefone_cliente) { ?>
-                                                        <span><?= $result->celular_cliente ?></span></br>
+                                                        <span><?= esc($result->celular_cliente) ?></span></br>
                                                     <?php } else { ?>
-                                                        <?= !empty($result->telefone_cliente) ? $result->telefone_cliente : "" ?>
+                                                        <?= (!empty($result->telefone_cliente) ? esc($result->telefone_cliente) : "") ?>
                                                         <?= !empty($result->celular_cliente) && !empty($result->telefone_cliente) ? ' / ' : "" ?>
-                                                        <?= !empty($result->celular_cliente) ? $result->celular_cliente : "" ?></br>
+                                                        <?= (!empty($result->celular_cliente) ? esc($result->celular_cliente) : "") ?></br>
                                                     <?php } ?>
                                                 </span>
                                                 <?php if (!empty($result->email)) : ?>
-                                                        <span><?php echo $result->email ?></span><br>
+                                                        <span><?= esc($result->email) ?></span><br>
                                                 <?php endif; ?>
                                                 <span><?php
                                                     $retorno_end = array_filter([$result->rua, $result->numero, $result->complemento, $result->bairro]);
@@ -137,9 +137,9 @@
                                 </tr>
                                 <tr>
                                     <td style="text-align: center; width: 100%; font-size: 12px;">
-                                        <b>N° OS: </b><span><?php echo $result->idOs ?></span>
-                                        <span style="padding-left: 5%;"><b>Status: </b><?php echo $result->status ?></span></br>
-                                        <b>Emissão:</b> <?php echo date('d/m/Y H:i:s') ?>
+                                        <b>N° OS: </b><span><?= esc($result->idOs) ?></span>
+                                        <span style="padding-left: 5%;"><b>Status: </b><?= esc($result->status) ?></span></br>
+                                        <b>Emissão:</b> <?= date('d/m/Y H:i:s') ?>
                                     </td>
                                 </tr>
                             </tbody>
@@ -150,31 +150,31 @@
                             <tbody>
                                 <?php if ($result->dataInicial != null) { ?>
                                     <tr>
-                                        <td><b>Inicial: </b><?php echo date('d/m/Y', strtotime($result->dataInicial)); ?></td>
-                                        <td><b>Final: </b><?php echo $result->dataFinal ? date('d/m/Y', strtotime($result->dataFinal)) : ''; ?></td>
-                                        <?php if ($result->garantia != null) { ?><td><b>Garantia:</b></br><?php echo $result->garantia . ' dia(s)'; ?><?php } ?></td>
+                                        <td><b>Inicial: </b><?= date('d/m/Y', strtotime($result->dataInicial)) ?></td>
+                                        <td><b>Final: </b><?= $result->dataFinal ? date('d/m/Y', strtotime($result->dataFinal)) : '' ?></td>
+                                        <?php if ($result->garantia != null) { ?><td><b>Garantia:</b></br><?= esc($result->garantia) . ' dia(s)' ?><?php } ?></td>
                                     </tr>
                                 <?php } ?>
 
                                 <?php if ($result->descricaoProduto != null) { ?>
                                     <tr>
-                                        <td colspan="5"><b>Descrição: </b><?php echo printSafeHtml($result->descricaoProduto) ?></td>
+                                        <td colspan="5"><b>Descrição: </b><?= printSafeHtml($result->descricaoProduto) ?></td>
                                     </tr>
                                 <?php } ?>
                                 <?php if ($result->defeito != null) { ?>
                                     <tr>
-                                        <td colspan="5"><b>Defeito Apresentado: </b><?php echo printSafeHtml($result->defeito) ?></td>
+                                        <td colspan="5"><b>Defeito Apresentado: </b><?= printSafeHtml($result->defeito) ?></td>
                                     </tr>
                                 <?php } ?>
                                 <?php if ($result->observacoes != null) { ?>
                                     <tr>
-                                        <td colspan="5"><b>Observações: </b><?php echo printSafeHtml($result->observacoes) ?></td>
+                                        <td colspan="5"><b>Observações: </b><?= printSafeHtml($result->observacoes) ?></td>
                                     </tr>
                                 <?php } ?>
                                 <?php if ($result->status != 'Aberto') { ?>
                                     <?php if ($result->laudoTecnico != null) { ?>
                                         <tr>
-                                            <td colspan="5"><b>Laudo Técnico: </b><?php echo printSafeHtml($result->laudoTecnico) ?></td>
+                                            <td colspan="5"><b>Laudo Técnico: </b><?= printSafeHtml($result->laudoTecnico) ?></td>
                                         </tr>
                                     <?php } ?>
                                 <?php } ?>
@@ -182,7 +182,7 @@
                                     <tr>
                                         <td colspan="5">
                                             <strong>Termo de Garantia: </strong><br>
-                                            <?php echo printSafeHtml($result->textoGarantia) ?>
+                                            <?= printSafeHtml($result->textoGarantia) ?>
                                         </td>
                                     </tr>
                                 <?php } ?>
@@ -212,7 +212,7 @@
 
                                 <tr>
                                     <td colspan="3" style="text-align: right"><strong>Total:</strong></td>
-                                    <td><strong>R$ <?php echo number_format($totalProdutos, 2, ',', '.'); ?></strong></td>
+                                    <td><strong>R$ <?= number_format($totalProdutos, 2, ',', '.') ?></strong></td>
                                 </tr>
                             </tbody>
                         </table>
@@ -242,7 +242,7 @@
                         } ?>
                                 <tr>
                                     <td colspan="3" style="text-align: right"><strong>Total:</strong></td>
-                                    <td><strong>R$ <?php echo number_format($totalServico, 2, ',', '.'); ?></strong></td>
+                                    <td><strong>R$ <?= number_format($totalServico, 2, ',', '.') ?></strong></td>
                                 </tr>
                             </tbody>
                         </table>
@@ -266,9 +266,9 @@
                         <?php if ($result->status == 'Finalizado' || $result->status == 'Orçamento') { ?>
                             <?php if ($qrCode) : ?>
                                 <td style="width: 15%; padding: 0;text-align:center;">
-                                    <img style="margin:12px 0px 0px 0px" src="<?php echo base_url(); ?>assets/img/logo_pix.png" width="64px" alt="QR Code de Pagamento" /></br>
-                                    <img style="margin:5px 0px 0px 0px" width="94px" src="<?= $qrCode ?>" alt="QR Code de Pagamento" /></br>
-                                    <?php echo '<span style="margin:0px;font-size: 80%;text-align:center;">Chave PIX: ' . $chaveFormatada . '</span><hr>' ;?>
+                                    <img style="margin:12px 0px 0px 0px" src="<?= base_url() ?>assets/img/logo_pix.png" width="64px" alt="QR Code de Pagamento" /></br>
+                                    <img style="margin:5px 0px 0px 0px" width="94px" src="<?= esc($qrCode) ?>" alt="QR Code de Pagamento" /></br>
+                                        <?= '<span style="margin:0px;font-size: 80%;text-align:center;">Chave PIX: ' . esc($chaveFormatada) . '</span><hr>' ?>
                                 </td>
                             <?php endif ?>
                         <?php } ?>
@@ -288,22 +288,22 @@
                 <!-- Via Da Empresa  -->
                 <?php $totalServico = 0;
 $totalProdutos = 0; ?>
-                    <div id="ViaEmpresa" <?php echo (!$configuration['control_2vias']) ? "style='display: none;'" : "style='display: block;'" ?>>
+                    <div id="ViaEmpresa" <?= (!$configuration['control_2vias']) ? "style='display: none;'" : "style='display: block;'" ?>>
                         <div class="invoice-head" style="margin-bottom: 0">
                             <table class="table table-condensed">
                                 <tbody>
                                     <?php if ($emitente == null) { ?>
                                         <tr>
-                                            <td colspan="5" class="alert">Você precisa configurar os dados do emitente. >>><a href="<?php echo base_url(); ?>index.php/mapos/emitente">Configurar</a><<<</td>
+                                            <td colspan="5" class="alert">Você precisa configurar os dados do emitente. >>><a href="<?= base_url() ?>index.php/mapos/emitente">Configurar</a><<<</td>
                                         </tr>
                                     <?php } else { ?>
-                                        <td style="width: 25% ;text-align: center" ><img src="<?php echo $emitente->url_logo; ?>" style="max-height: 100px"></td>
+                                        <td style="width: 25% ;text-align: center" ><img src="<?= esc($emitente->url_logo) ?>" style="max-height: 100px"></td>
                                     <tr>
                                         <td colspan="5" style="text-align: center; font-size: 11px;" >
-                                            <span style="font-size: 12px; text-transform: uppercase"><b><?php echo $emitente->nome; ?></b></br></span>
-                                            <?php if ($emitente->cnpj != "00.000.000/0000-00") { ?><span class="icon"><i class="fas fa-fingerprint" style="margin:5px 1px"></i> <?php echo $emitente->cnpj; ?></span></br><?php } ?>
-                                            <span><?php echo $emitente->rua . ', ' . $emitente->numero . '</br>' . $emitente->bairro . ', ' . $emitente->cidade . ' - ' . $emitente->uf; ?></span></br>
-                                            <span><?php echo $emitente->email; ?> - <?php echo $emitente->telefone; ?></span>
+                                            <span style="font-size: 12px; text-transform: uppercase"><b><?= esc($emitente->nome) ?></b></br></span>
+                                            <?php if ($emitente->cnpj != "00.000.000/0000-00") { ?><span class="icon"><i class="fas fa-fingerprint" style="margin:5px 1px"></i> <?= esc($emitente->cnpj) ?></span></br><?php } ?>
+                                            <span><?= $emitente->rua . ', ' . $emitente->numero . '</br>' . $emitente->bairro . ', ' . $emitente->cidade . ' - ' . $emitente->uf ?></span></br>
+                                            <span><?= esc($emitente->email) ?> - <?= esc($emitente->telefone) ?></span>
                                         </td>
                                     </tr>
                                 <?php } ?>
@@ -316,18 +316,18 @@
                                         <ul>
                                             <li>
                                                 <span><b>CLIENTE</b></br></span>
-                                                <span><?php echo $result->nomeCliente ?></br></span>
+                                                <span><?= esc($result->nomeCliente) ?></br></span>
                                                 <?= !empty($result->contato_cliente) ? '<span>' . $result->contato_cliente . ' </span>' : '' ?>
                                                     <?php if ($result->celular_cliente == $result->telefone_cliente) { ?>
-                                                        <span><?= $result->celular_cliente ?></span></br>
+                                                        <span><?= esc($result->celular_cliente) ?></span></br>
                                                     <?php } else { ?>
-                                                        <?= !empty($result->telefone_cliente) ? $result->telefone_cliente : "" ?>
+                                                        <?= (!empty($result->telefone_cliente) ? esc($result->telefone_cliente) : "") ?>
                                                         <?= !empty($result->celular_cliente) && !empty($result->telefone_cliente) ? ' / ' : "" ?>
-                                                        <?= !empty($result->celular_cliente) ? $result->celular_cliente : "" ?></br>
+                                                        <?= (!empty($result->celular_cliente) ? esc($result->celular_cliente) : "") ?></br>
                                                     <?php } ?>
                                                 </span>
                                                 <?php if (!empty($result->email)) : ?>
-                                                        <span><?php echo $result->email ?></span><br>
+                                                        <span><?= esc($result->email) ?></span><br>
                                                 <?php endif; ?>
                                                 <span><?php
                                     $retorno_end = array_filter([$result->rua, $result->numero, $result->complemento, $result->bairro]);
@@ -345,9 +345,9 @@
                                 </tr>
                                 <tr>
                                     <td style="text-align: center; width: 100%; font-size: 12px;">
-                                        <b>N° OS: </b><span><?php echo $result->idOs ?></span>
-                                        <span style="padding-left: 5%;"><b>Status: </b><?php echo $result->status ?></span></br>
-                                        <b>Emissão:</b> <?php echo date('d/m/Y') ?>
+                                        <b>N° OS: </b><span><?= esc($result->idOs) ?></span>
+                                        <span style="padding-left: 5%;"><b>Status: </b><?= esc($result->status) ?></span></br>
+                                        <b>Emissão:</b> <?= date('d/m/Y') ?>
                                     </td>
                                 </tr>
                             </tbody>
@@ -360,36 +360,36 @@
                                             <tr>
                                                 <td>
                                                     <b>Inicial: </b>
-                                                    <?php echo date('d/m/Y', strtotime($result->dataInicial)); ?>
+                                                    <?= date('d/m/Y', strtotime($result->dataInicial)) ?>
                                                 </td>
                                                 <td>
                                                     <b>Final: </b>
-                                                    <?php echo $result->dataFinal ? date('d/m/Y', strtotime($result->dataFinal)) : ''; ?>
+                                                    <?= $result->dataFinal ? date('d/m/Y', strtotime($result->dataFinal)) : '' ?>
                                                 </td>
                                                 <td>
                                                     <?php if ($result->garantia != null) { ?>
-                                                        <b>Garantia: </b><?php echo $result->garantia . ' dia(s)'; ?>
+                                                        <b>Garantia: </b><?= esc($result->garantia) . ' dia(s)' ?>
                                                     <?php } ?>
                                                 </td>
                                         <?php } ?>
                                         <?php if ($result->descricaoProduto != null) { ?>
                                             <tr>
                                                 <td colspan="5">
-                                                    <b>Descrição: </b><?php echo printSafeHtml($result->descricaoProduto) ?>
+                                                    <b>Descrição: </b><?= printSafeHtml($result->descricaoProduto) ?>
                                                 </td>
                                             </tr>
                                         <?php } ?>
                                         <?php if ($result->defeito != null) { ?>
                                             <tr>
                                                 <td colspan="5">
-                                                    <b>Defeito Apresentado: </b><?php echo printSafeHtml($result->defeito) ?>
+                                                    <b>Defeito Apresentado: </b><?= printSafeHtml($result->defeito) ?>
                                                 </td>
                                             </tr>
                                         <?php } ?>
                                         <?php if ($result->observacoes != null) { ?>
                                             <tr>
                                                 <td colspan="5">
-                                                    <b>Observações: </b><?php echo printSafeHtml($result->observacoes) ?>
+                                                    <b>Observações: </b><?= printSafeHtml($result->observacoes) ?>
                                                 </td>
                                             </tr>
                                         <?php } ?>
@@ -397,7 +397,7 @@
                                         <?php if ($result->laudoTecnico != null) { ?>
                                             <tr>
                                                 <td colspan="5">
-                                                    <b>Laudo Técnico: </b><?php echo printSafeHtml($result->laudoTecnico) ?>
+                                                    <b>Laudo Técnico: </b><?= printSafeHtml($result->laudoTecnico) ?>
                                                 </td>
                                             </tr>
                                         <?php } ?>
@@ -405,7 +405,7 @@
                                     <?php if ($result->garantias_id != null) { ?>
                                     <tr>
                                         <td colspan="5">
-                                            <strong>Termo de Garantia: </strong><br><?php echo printSafeHtml($result->textoGarantia) ?>
+                                            <strong>Termo de Garantia: </strong><br><?= printSafeHtml($result->textoGarantia) ?>
                                         </td>
                                     </tr>
                                 <?php } ?>
@@ -435,7 +435,7 @@
 
                                     <tr>
                                         <td colspan="3" style="text-align: right"><strong>Total:</strong></td>
-                                        <td><strong>R$ <?php echo number_format($totalProdutos, 2, ',', '.'); ?></strong></td>
+                                        <td><strong>R$ <?= number_format($totalProdutos, 2, ',', '.') ?></strong></td>
                                     </tr>
                                 </tbody>
                             </table>
@@ -466,7 +466,7 @@
                             } ?>
                                     <tr>
                                         <td colspan="3" style="text-align: right"><strong>Total:</strong></td>
-                                        <td><strong>R$ <?php echo number_format($totalServico, 2, ',', '.'); ?></strong></td>
+                                        <td><strong>R$ <?= number_format($totalServico, 2, ',', '.') ?></strong></td>
                                     </tr>
                                 </tbody>
                             </table>
@@ -491,9 +491,9 @@
                             <?php if ($result->status == 'Finalizado' || $result->status == 'Orçamento') { ?>
                                 <?php if ($qrCode) : ?>
                                     <td style="width: 15%; padding: 0;text-align:center;">
-                                        <img style="margin:12px 0px 0px 0px" src="<?php echo base_url(); ?>assets/img/logo_pix.png" width="64px" alt="QR Code de Pagamento" /></br>
-                                        <img style="margin:5px 0px 0px 0px" width="94px" src="<?= $qrCode ?>" alt="QR Code de Pagamento" /></br>
-                                        <?php echo '<span style="margin:0px;font-size: 80%;text-align:center;">Chave PIX: ' . $chaveFormatada . '</span><hr>' ;?>
+                                        <img style="margin:12px 0px 0px 0px" src="<?= base_url() ?>assets/img/logo_pix.png" width="64px" alt="QR Code de Pagamento" /></br>
+                                        <img style="margin:5px 0px 0px 0px" width="94px" src="<?= esc($qrCode) ?>" alt="QR Code de Pagamento" /></br>
+                                    <?= '<span style="margin:0px;font-size: 80%;text-align:center;">Chave PIX: ' . esc($chaveFormatada) . '</span><hr>' ?>
                                     </td>
                                 <?php endif ?>
                             <?php } ?>
@@ -521,7 +521,7 @@
   window.print();
 </script>
 </body>
-    <script src="<?php echo base_url(); ?>assets/js/bootstrap.min.js"></script>
-    <script src="<?php echo base_url(); ?>assets/js/matrix.js"></script>
+    <script src="<?= base_url() ?>assets/js/bootstrap.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/matrix.js"></script>
 
 </html>
diff --git a/application/views/os/os.php b/application/views/os/os.php
index 407049ac0..a6e113216 100644
--- a/application/views/os/os.php
+++ b/application/views/os/os.php
@@ -1,7 +1,7 @@
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/table-custom.css" />
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
-<script src="<?php echo base_url() ?>assets/js/sweetalert2.all.min.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
+<link rel="stylesheet" href="<?= base_url() ?>assets/css/table-custom.css" />
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
+<script src="<?= base_url() ?>assets/js/sweetalert2.all.min.js"></script>
 <style>
   select {
     width: 70px;
@@ -15,37 +15,37 @@
             <h5>Ordens de Serviço</h5>
         </div>
     <div class="span12" style="margin-left: 0">
-        <form method="get" action="<?php echo base_url(); ?>index.php/os/gerenciar">
+        <form method="get" action="<?= base_url() ?>index.php/os/gerenciar">
             <?php if ($this->permission->checkPermission($this->session->userdata('permissao'), 'aOs')) { ?>
                 <div class="span3">
-                    <a href="<?php echo base_url(); ?>index.php/os/adicionar" class="button btn btn-mini btn-success" style="max-width: 160px">
+                    <a href="<?= base_url() ?>index.php/os/adicionar" class="button btn btn-mini btn-success" style="max-width: 160px">
                         <span class="button__icon"><i class='bx bx-plus-circle'></i></span><span class="button__text2">Ordem de Serviço</span></a>
                 </div>
             <?php
             } ?>
 
             <div class="span3">
-                <input type="text" name="pesquisa" id="pesquisa" placeholder="Nome do cliente a pesquisar" class="span12" value="<?=set_value('pesquisa')?>">
+                <input type="text" name="pesquisa" id="pesquisa" placeholder="Nome do cliente a pesquisar" class="span12" value="<?= set_value('pesquisa') ?>">
             </div>
             <div class="span2">
                 <select name="status" id="" class="span12">
                     <option value="">Selecione status</option>
-                    <option value="Aberto" <?=$this->input->get('status') == 'Aberto' ? 'selected' : ''?>>Aberto</option>
-                    <option value="Faturado" <?=$this->input->get('status') == 'Faturado' ? 'selected' : ''?>>Faturado</option>
-                    <option value="Negociação" <?=$this->input->get('status') == 'Negociação' ? 'selected' : ''?>>Negociação</option>
-                    <option value="Em Andamento" <?=$this->input->get('status') == 'Em Andamento' ? 'selected' : ''?>>Em Andamento</option>
-                    <option value="Orçamento" <?=$this->input->get('status') == 'Orçamento' ? 'selected' : ''?>>Orçamento</option>
-                    <option value="Finalizado" <?=$this->input->get('status') == 'Finalizado' ? 'selected' : ''?>>Finalizado</option>
-                    <option value="Cancelado" <?=$this->input->get('status') == 'Cancelado' ? 'selected' : ''?>>Cancelado</option>
-                    <option value="Aguardando Peças" <?=$this->input->get('status') == 'Aguardando Peças' ? 'selected' : ''?>>Aguardando Peças</option>
-                    <option value="Aprovado" <?=$this->input->get('status') == 'Aprovado' ? 'selected' : ''?>>Aprovado</option>
+                    <option value="Aberto" <?= $this->input->get('status') == 'Aberto' ? 'selected' : '' ?>>Aberto</option>
+                    <option value="Faturado" <?= $this->input->get('status') == 'Faturado' ? 'selected' : '' ?>>Faturado</option>
+                    <option value="Negociação" <?= $this->input->get('status') == 'Negociação' ? 'selected' : '' ?>>Negociação</option>
+                    <option value="Em Andamento" <?= $this->input->get('status') == 'Em Andamento' ? 'selected' : '' ?>>Em Andamento</option>
+                    <option value="Orçamento" <?= $this->input->get('status') == 'Orçamento' ? 'selected' : '' ?>>Orçamento</option>
+                    <option value="Finalizado" <?= $this->input->get('status') == 'Finalizado' ? 'selected' : '' ?>>Finalizado</option>
+                    <option value="Cancelado" <?= $this->input->get('status') == 'Cancelado' ? 'selected' : '' ?>>Cancelado</option>
+                    <option value="Aguardando Peças" <?= $this->input->get('status') == 'Aguardando Peças' ? 'selected' : '' ?>>Aguardando Peças</option>
+                    <option value="Aprovado" <?= $this->input->get('status') == 'Aprovado' ? 'selected' : '' ?>>Aprovado</option>
                 </select>
 
             </div>
 
             <div class="span3">
-                <input type="text" name="data" autocomplete="off" id="data" placeholder="Data Inicial" class="span6 datepicker" value="<?=html_escape($this->input->get('data'))?>">
-                <input type="text" name="data2" autocomplete="off" id="data2" placeholder="Data Final" class="span6 datepicker" value="<?=html_escape($this->input->get('data2'))?>">
+                <input type="text" name="data" autocomplete="off" id="data" placeholder="Data Inicial" class="span6 datepicker" value="<?= html_escape($this->input->get('data')) ?>">
+                <input type="text" name="data2" autocomplete="off" id="data2" placeholder="Data Final" class="span6 datepicker" value="<?= html_escape($this->input->get('data2')) ?>">
             </div>
             <div class="span1">
                 <button class="button btn btn-mini btn-warning" style="min-width: 30px">
@@ -185,11 +185,11 @@
         </div>
     </div>
 
-    <?php echo $this->pagination->create_links(); ?>
+    <?= $this->pagination->create_links() ?>
 
     <!-- Modal -->
     <div id="modal-excluir" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-        <form action="<?php echo base_url() ?>index.php/os/excluir" method="post">
+        <form action="<?= base_url() ?>index.php/os/excluir" method="post">
             <div class="modal-header">
                 <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
                 <h5 id="myModalLabel">Excluir OS</h5>
@@ -216,7 +216,7 @@
         $(document).on('click', '#excluir-notificacao', function(event) {
             event.preventDefault();
             $.ajax({
-                    url: '<?php echo site_url() ?>/os/excluir_notificacao',
+                    url: '<?= site_url() ?>/os/excluir_notificacao',
                     type: 'GET',
                     dataType: 'json',
                 })
diff --git a/application/views/os/visualizarOs.php b/application/views/os/visualizarOs.php
index 65640fdcf..e0b2c947c 100644
--- a/application/views/os/visualizarOs.php
+++ b/application/views/os/visualizarOs.php
@@ -13,14 +13,14 @@
                     <div class="button-container">
                         <a target="_blank" title="Imprimir Ordem de Serviço" class="button btn btn-mini btn-inverse"> <span class="button__icon"><i class="bx bx-printer"></i></span><span class="button__text">Imprimir</span></a>
                         <div class="cascading-buttons">
-                            <a target="_blank" title="Impressão em Papel A4" class="button btn btn-mini btn-inverse" href="<?php echo site_url() ?>/os/imprimir/<?php echo $result->idOs; ?>">
+                            <a target="_blank" title="Impressão em Papel A4" class="button btn btn-mini btn-inverse" href="<?= site_url() ?>/os/imprimir/<?= esc($result->idOs) ?>">
                                 <span class="button__icon"><i class='bx bx-file'></i></span> <span class="button__text">Papel A4</span>
                             </a>
-                            <a target="_blank" title="Impressão Cupom Não Fical" class="button btn btn-mini btn-inverse" href="<?php echo site_url() ?>/os/imprimirTermica/<?php echo $result->idOs; ?>">
+                            <a target="_blank" title="Impressão Cupom Não Fical" class="button btn btn-mini btn-inverse" href="<?= site_url() ?>/os/imprimirTermica/<?= esc($result->idOs) ?>">
                                 <span class="button__icon"><i class='bx bx-receipt'></i></span> <span class="button__text">Cupom 80mm</span>
                             </a>
                             <?php if ($result->garantias_id) { ?>
-                                <a target="_blank" title="Imprimir Termo de Garantia" class="button btn btn-mini btn-inverse" href="<?php echo site_url() ?>/garantias/imprimirGarantiaOs/<?php echo $result->idOs; ?>">
+                                <a target="_blank" title="Imprimir Termo de Garantia" class="button btn btn-mini btn-inverse" href="<?= site_url() ?>/garantias/imprimirGarantiaOs/<?= esc($result->idOs) ?>">
                                     <span class="button__icon"><i class="bx bx-paperclip"></i></span> <span class="button__text">Termo Garantia</span>
                                 </a>
                             <?php } ?>
@@ -33,13 +33,16 @@
                         $troca = [$result->nomeCliente, $result->idOs, $result->status, 'R$ ' . ($result->desconto != 0 && $result->valor_desconto != 0 ? number_format($result->valor_desconto, 2, ',', '.') : number_format($totalProdutos + $totalServico, 2, ',', '.')), strip_tags($result->descricaoProduto), ($emitente ? $emitente->nome : ''), ($emitente ? $emitente->telefone : ''), strip_tags($result->observacoes), strip_tags($result->defeito), strip_tags($result->laudoTecnico), date('d/m/Y', strtotime($result->dataFinal)), date('d/m/Y', strtotime($result->dataInicial)), $result->garantia . ' dias'];
                         $texto_de_notificacao = $this->os_model->criarTextoWhats($texto_de_notificacao, $troca);
                         if (!empty($zapnumber)) {
-                            echo '<a title="Enviar Por WhatsApp" class="button btn btn-mini btn-success" id="enviarWhatsApp" target="_blank" href="https://api.whatsapp.com/send?phone=55' . $zapnumber . '&text=' . $texto_de_notificacao . '">
+                            $whatsappUrl = 'https://api.whatsapp.com/send?phone=55' . rawurlencode($zapnumber) . '&text=' . rawurlencode($texto_de_notificacao);
+                            ?>
+                            <a title="Enviar Por WhatsApp" class="button btn btn-mini btn-success" id="enviarWhatsApp" target="_blank" href="<?= esc_url($whatsappUrl) ?>">
                                 <span class="button__icon"><i class="bx bxl-whatsapp"></i></span> <span class="button__text">WhatsApp</span>
-                            </a>';
+                            </a>
+                            <?php
                         }
                     } ?>
 
-                    <a title="Enviar OS por E-mail" class="button btn btn-mini btn-warning" href="<?php echo site_url() ?>/os/enviar_email/<?php echo $result->idOs; ?>">
+                    <a title="Enviar OS por E-mail" class="button btn btn-mini btn-warning" href="<?= site_url() ?>/os/enviar_email/<?= esc($result->idOs) ?>">
                         <span class="button__icon"><i class="bx bx-envelope"></i></span> <span class="button__text">via E-mail</span>
                     </a>
 
@@ -61,10 +64,10 @@
                             <tbody>
                                 <?php if ($emitente == null) { ?>
                                     <tr>
-                                        <td colspan="3" class="alert">Você precisa configurar os dados do emitente. >>><a href="<?php echo base_url(); ?>index.php/mapos/emitente">Configurar <<< </a></td>
+                                        <td colspan="3" class="alert">Você precisa configurar os dados do emitente. >>><a href="<?= base_url() ?>index.php/mapos/emitente">Configurar <<< </a></td>
                                     </tr>
                                 <?php } ?>
-                                <h3><i class='bx bx-file'></i> Ordem de Serviço #<?php echo sprintf('%04d', $result->idOs) ?></h3>
+                                <h3><i class='bx bx-file'></i> Ordem de Serviço #<?= sprintf('%04d', $result->idOs) ?></h3>
                             </tbody>
                         </table>
                         <table class="table table-condensend">
@@ -73,7 +76,7 @@
                                     <td style="width: 60%; padding-left: 0">
                                         <span>
                                             <h5><b>CLIENTE</b></h5>
-                                            <span><i class='bx bxs-business'></i> <b><?php echo html_escape($result->nomeCliente) ?></b></span><br />
+                                            <span><i class='bx bxs-business'></i> <b><?= html_escape($result->nomeCliente) ?></b></span><br />
                                             <?php if (!empty($result->celular_cliente) || !empty($result->telefone_cliente) || !empty($result->contato_cliente)): ?>
                                                 <span><i class='bx bxs-phone'></i>
                                                     <?= !empty($result->contato_cliente) ? html_escape($result->contato_cliente) . ' ' : "" ?>
@@ -99,7 +102,7 @@
 ?>
                                             <?php if (!empty($result->email)): ?>
                                                 <span><i class="fas fa-envelope"></i>
-                                                    <?php echo html_escape($result->email) ?></span><br>
+                                                    <?= html_escape($result->email) ?></span><br>
                                             <?php endif; ?>
                                         </span>
                                     </td>
@@ -110,11 +113,11 @@
                                                     <h5><b>RESPONSÁVEL</b></h5>
                                                 </span>
                                                 <span><b><i class="fas fa-user"></i>
-                                                        <?php echo html_escape($result->nome) ?></b></span><br />
+                                                        <?= html_escape($result->nome) ?></b></span><br />
                                                 <span><i class="fas fa-phone"></i>
-                                                    <?php echo html_escape($result->telefone_usuario) ?></span><br />
+                                                    <?= html_escape($result->telefone_usuario) ?></span><br />
                                                 <span><i class="fas fa-envelope"></i>
-                                                    <?php echo html_escape($result->email_usuario) ?></span>
+                                                    <?= html_escape($result->email_usuario) ?></span>
                                             </li>
                                         </ul>
                                     </td>
@@ -131,22 +134,22 @@
                                     <tr>
                                         <td>
                                             <b>STATUS OS: </b><br>
-                                            <?php echo $result->status ?>
+                                            <?= esc($result->status) ?>
                                         </td>
 
                                         <td>
                                             <b>DATA INICIAL: </b><br>
-                                            <?php echo date('d/m/Y', strtotime($result->dataInicial)); ?>
+                                            <?= date('d/m/Y', strtotime($result->dataInicial)) ?>
                                         </td>
 
                                         <td>
                                             <b>DATA FINAL: </b><br>
-                                            <?php echo $result->dataFinal ? date('d/m/Y', strtotime($result->dataFinal)) : ''; ?>
+                                            <?= $result->dataFinal ? date('d/m/Y', strtotime($result->dataFinal)) : '' ?>
                                         </td>
 
                                         <td>
                                             <?php if ($result->garantia) { ?>
-                                                <b>GARANTIA: </b><br><?php echo $result->garantia . ' dia(s)'; ?>
+                                                <b>GARANTIA: </b><br><?= esc($result->garantia) . ' dia(s)' ?>
                                             <?php } ?>
                                         </td>
 
@@ -163,7 +166,7 @@
                                     <tr>
                                         <td colspan="5">
                                             <b>DESCRIÇÃO: </b>
-                                            <?php echo printSafeHtml($result->descricaoProduto) ?>
+                                            <?= printSafeHtml($result->descricaoProduto) ?>
                                         </td>
                                     </tr>
                                 <?php } ?>
@@ -172,7 +175,7 @@
                                     <tr>
                                         <td colspan="5">
                                             <b>DEFEITO APRESENTADO: </b>
-                                            <?php echo printSafeHtml($result->defeito) ?>
+                                            <?= printSafeHtml($result->defeito) ?>
                                         </td>
                                     </tr>
                                 <?php } ?>
@@ -181,7 +184,7 @@
                                     <tr>
                                         <td colspan="5">
                                             <b>OBSERVAÇÕES: </b>
-                                            <?php echo printSafeHtml($result->observacoes) ?>
+                                            <?= printSafeHtml($result->observacoes) ?>
                                         </td>
                                     </tr>
                                 <?php } ?>
@@ -190,7 +193,7 @@
                                     <tr>
                                         <td colspan="5">
                                             <b>LAUDO TÉCNICO: </b>
-                                            <?php echo printSafeHtml($result->laudoTecnico) ?>
+                                            <?= printSafeHtml($result->laudoTecnico) ?>
                                         </td>
                                     </tr>
                                 <?php } ?>
@@ -199,7 +202,7 @@
                                     <tr>
                                         <td colspan="5">
                                             <strong>TERMO DE GARANTIA </strong><br>
-                                            <?php echo printSafeHtml($result->textoGarantia) ?>
+                                            <?= printSafeHtml($result->textoGarantia) ?>
                                         </td>
                                     </tr>
                                 <?php } ?>
@@ -275,7 +278,7 @@
                                     <tr>
                                         <td></td>
                                         <td colspan="2" style="text-align: right"><strong>TOTAL:</strong></td>
-                                        <td><strong>R$ <?php echo number_format($totalProdutos, 2, ',', '.'); ?></strong>
+                                        <td><strong>R$ <?= number_format($totalProdutos, 2, ',', '.') ?></strong>
                                         </td>
                                     </tr>
                                 </tbody>
@@ -305,7 +308,7 @@
                             } ?>
                                     <tr>
                                         <td colspan="3" style="text-align: right"><strong>TOTAL:</strong></td>
-                                        <td><strong>R$ <?php echo number_format($totalServico, 2, ',', '.'); ?></strong>
+                                        <td><strong>R$ <?= number_format($totalServico, 2, ',', '.') ?></strong>
                                         </td>
                                     </tr>
                                 </tbody>
@@ -366,9 +369,9 @@
     <div class="modal-body">
         <div class="span12" id="div-pix" style="text-align: center">
             <td style="width: 15%; padding: 0;text-align:center;">
-                <img src="<?php echo base_url(); ?>assets/img/logo_pix.png" alt="QR Code de Pagamento" /></br>
-                <img id="qrCodeImage" width="50%" src="<?= $qrCode ?>" alt="QR Code de Pagamento" /></br>
-                <?php echo '<span>Chave PIX: ' . $chaveFormatada . '</span>'; ?></br>
+                <img src="<?= base_url() ?>assets/img/logo_pix.png" alt="QR Code de Pagamento" /></br>
+                <img id="qrCodeImage" width="50%" src="<?= esc($qrCode) ?>" alt="QR Code de Pagamento" /></br>
+                <?= '<span>Chave PIX: ' . esc($chaveFormatada) . '</span>' ?></br>
                 <?php if ($totalProdutos != 0 || $totalServico != 0) {
                     if ($result->valor_desconto != 0) {
                         echo "Valor Total: R$ " . number_format($result->valor_desconto, 2, ',', '.');
@@ -394,10 +397,10 @@
             event.preventDefault();
             var link = $(this).attr('link');
             var id = $(this).attr('imagem');
-            var url = '<?php echo base_url(); ?>index.php/os/excluirAnexo/';
+            var url = '<?= base_url() ?>index.php/os/excluirAnexo/';
             $("#div-visualizar-anexo").html('<img src="' + link + '" alt="">');
             $("#excluir-anexo").attr('link', url + id);
-            $("#download").attr('href', "<?php echo base_url(); ?>index.php/os/downloadanexo/" + id);
+            $("#download").attr('href', "<?= base_url() ?>index.php/os/downloadanexo/" + id);
 
         });
 
@@ -405,7 +408,7 @@
             event.preventDefault();
 
             var link = $(this).attr('link');
-            var idOS = "<?php echo $result->idOs; ?>"
+            var idOS = <?= esc_js($result->idOs) ?>
 
             $('#modal-anexo').modal('hide');
             $("#divAnexos").html("<div class='progress progress-info progress-striped active'><div class='bar' style='width: 100%'></div></div>");
@@ -417,7 +420,7 @@
                 data: "idOs=" + idOS,
                 success: function(data) {
                     if (data.result == true) {
-                        $("#divAnexos").load("<?php echo current_url(); ?> #divAnexos");
+                        $("#divAnexos").load("<?= current_url() ?> #divAnexos");
                     } else {
                         swal({
                             type: "error",
@@ -478,7 +481,7 @@
         var imageData = context.getImageData(0, 0, canvas.width, canvas.height);
         var code = jsQR(imageData.data, imageData.width, imageData.height);
         if (code) {
-            var whatsappLink = 'https://api.whatsapp.com/send?phone=55' + <?= isset($zapnumber) ? $zapnumber : "" ?> + '&text=' + code.data;
+            var whatsappLink = 'https://api.whatsapp.com/send?phone=55' + <?= esc_js($zapnumber ?? '') ?> + '&text=' + encodeURIComponent(code.data);
             window.open(whatsappLink, '_blank');
         } else {
             swal({
diff --git a/application/views/permissoes/adicionarPermissao.php b/application/views/permissoes/adicionarPermissao.php
index 993c15376..c0fdec1f0 100644
--- a/application/views/permissoes/adicionarPermissao.php
+++ b/application/views/permissoes/adicionarPermissao.php
@@ -1,5 +1,5 @@
 <div class="span12" style="margin-left: 0">
-    <form action="<?php echo base_url(); ?>index.php/permissoes/adicionar" id="formPermissao" method="post">
+    <form action="<?= base_url() ?>index.php/permissoes/adicionar" id="formPermissao" method="post">
         <div class="span12" style="margin-left: 0">
             <div class="widget-box">
                 <div class="widget-title" style="margin: -20px 0 0">
@@ -571,7 +571,7 @@
                         <div class="span12">
                             <div class="span6 offset3" style="display:flex;justify-content: center">
                                 <button type="submit" class="button btn btn-success"><span class="button__icon"><i class='bx bx-plus-circle'></i></span><span class="button__text2">Confirmar</span></button>
-                                <a title="Voltar" class="button btn btn-mini btn-warning" href="<?php echo site_url() ?>/permissoes">
+                                <a title="Voltar" class="button btn btn-mini btn-warning" href="<?= site_url() ?>/permissoes">
                                   <span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
                             </div>
                         </div>
@@ -581,7 +581,7 @@
         </div>
     </form>
 </div>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/validate.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/js/validate.js"></script>
 <script type="text/javascript">
     $(document).ready(function() {
         $("#marcarTodos").change(function() {
diff --git a/application/views/permissoes/editarPermissao.php b/application/views/permissoes/editarPermissao.php
index d7300ba15..40f288487 100644
--- a/application/views/permissoes/editarPermissao.php
+++ b/application/views/permissoes/editarPermissao.php
@@ -83,7 +83,7 @@
 
 <?php $permissoes = json_decode_legacy($result->permissoes); ?>
 <div class="span12" style="margin-left: 0">
-    <form action="<?php echo base_url();?>index.php/permissoes/editar" id="formPermissao" method="post">
+    <form action="<?= base_url() ?>index.php/permissoes/editar" id="formPermissao" method="post">
         <div class="span12" style="margin-left: 0">
             <div class="widget-box">
                 <div class="widget-title">
@@ -95,8 +95,8 @@
                 <div class="widget-content">
                     <div class="span4">
                         <label>Nome da Permissão</label>
-                        <input name="nome" type="text" id="nome" class="span12" value="<?php echo $result->nome; ?>" />
-                        <input type="hidden" name="idPermissao" value="<?php echo $result->idPermissao; ?>">
+                        <input name="nome" type="text" id="nome" class="span12" value="<?= esc($result->nome) ?>" />
+                        <input type="hidden" name="idPermissao" value="<?= esc($result->idPermissao) ?>">
                     </div>
                     <div class="span3">
                         <label>Situação</label>
@@ -108,8 +108,8 @@
                                 $sim = '';
                                 $nao ='selected';
                             }?>
-                            <option value="1" <?php echo $sim;?>>Ativo</option>
-                            <option value="0" <?php echo $nao;?>>Inativo</option>
+                            <option value="1" <?= esc($sim) ?>>Ativo</option>
+                            <option value="0" <?= esc($nao) ?>>Inativo</option>
                         </select>
                     </div>
                     <div class="span4">
@@ -840,19 +840,19 @@
                                 <tr>
                                     <td>
                                         <label>
-                                            <input <?php echo (isset($permissoes['cAuditoria']) && $permissoes['cAuditoria'] == 1) ? 'checked' : ''; ?> name="cAuditoria" class="marcar" type="checkbox" value="1" />
+                                            <input <?= (isset($permissoes['cAuditoria']) && $permissoes['cAuditoria'] == 1) ? 'checked' : '' ?> name="cAuditoria" class="marcar" type="checkbox" value="1" />
                                             <span class="lbl"> Auditoria</span>
                                         </label>
                                     </td>
                                     <td>
                                         <label>
-                                            <input <?php echo (isset($permissoes['cEmail']) && $permissoes['cEmail'] == 1) ? 'checked' : ''; ?> name="cEmail" class="marcar" type="checkbox" value="1" />
+                                            <input <?= (isset($permissoes['cEmail']) && $permissoes['cEmail'] == 1) ? 'checked' : '' ?> name="cEmail" class="marcar" type="checkbox" value="1" />
                                             <span class="lbl"> Emails</span>
                                         </label>
                                     </td>
                                     <td>
                                         <label>
-                                            <input <?php echo (isset($permissoes['cSistema']) && $permissoes['cSistema'] == 1) ? 'checked' : ''; ?> name="cSistema" class="marcar" type="checkbox" value="1" />
+                                            <input <?= (isset($permissoes['cSistema']) && $permissoes['cSistema'] == 1) ? 'checked' : '' ?> name="cSistema" class="marcar" type="checkbox" value="1" />
                                             <span class="lbl"> Sistema</span>
                                         </label>
                                     </td>
@@ -868,7 +868,7 @@
                             <div class="span6 offset3" style="display:flex;justify-content: center">
                               <button type="submit" class="button btn btn-primary">
                               <span class="button__icon"><i class='bx bx-save'></i></span><span class="button__text2">Salvar</span></button>
-                                <a title="Voltar" class="button btn btn-mini btn-warning" href="<?php echo site_url() ?>/permissoes">
+                                <a title="Voltar" class="button btn btn-mini btn-warning" href="<?= site_url() ?>/permissoes">
                                   <span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
                             </div>
                         </div>
@@ -880,7 +880,7 @@
 </div>
 
 
-<script type="text/javascript" src="<?php echo base_url()?>assets/js/validate.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/js/validate.js"></script>
 <script type="text/javascript">
     $(document).ready(function(){
         $("#marcarTodos").change(function () {
diff --git a/application/views/permissoes/permissoes.php b/application/views/permissoes/permissoes.php
index 3e01384a9..b610a33f2 100644
--- a/application/views/permissoes/permissoes.php
+++ b/application/views/permissoes/permissoes.php
@@ -11,7 +11,7 @@
         <h5>Permissões</h5>
     </div>
 
-  <a href="<?php echo base_url(); ?>index.php/permissoes/adicionar" class="button btn btn-success"style="max-width: 150px">
+  <a href="<?= base_url() ?>index.php/permissoes/adicionar" class="button btn btn-success"style="max-width: 150px">
   <span class="button__icon"><i class='bx bx-plus-circle'></i></span><span class="button__text2">Adicionar</span></a>
 
 <div class="widget-box">
@@ -56,11 +56,11 @@
         </table>
     </div>
 </div>
-<?php echo $this->pagination->create_links(); ?>
+<?= $this->pagination->create_links() ?>
 
 <!-- Modal -->
 <div id="modal-excluir" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form action="<?php echo base_url() ?>index.php/permissoes/desativar" method="post">
+    <form action="<?= base_url() ?>index.php/permissoes/desativar" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h5 id="myModalLabel">Desativar Permissão</h5>
diff --git a/application/views/produtos/adicionarProduto.php b/application/views/produtos/adicionarProduto.php
index 960b341f9..ab213c264 100644
--- a/application/views/produtos/adicionarProduto.php
+++ b/application/views/produtos/adicionarProduto.php
@@ -35,18 +35,18 @@
                 <h5>Cadastro de Produto</h5>
             </div>
             <div class="widget-content nopadding tab-content">
-                <?php echo $custom_error; ?>
-                <form action="<?php echo current_url(); ?>" id="formProduto" method="post" class="form-horizontal">
+                <?= $custom_error ?>
+                <form action="<?= current_url() ?>" id="formProduto" method="post" class="form-horizontal">
                     <div class="control-group">
                         <label for="codDeBarra" class="control-label">Código de Barra<span class=""></span></label>
                         <div class="controls">
-                            <input id="codDeBarra" type="text" name="codDeBarra" value="<?php echo set_value('codDeBarra'); ?>" />
+                            <input id="codDeBarra" type="text" name="codDeBarra" value="<?= set_value('codDeBarra') ?>" />
                         </div>
                     </div>
                     <div class="control-group">
                         <label for="descricao" class="control-label">Descrição<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="descricao" type="text" name="descricao" value="<?php echo set_value('descricao'); ?>" />
+                            <input id="descricao" type="text" name="descricao" value="<?= set_value('descricao') ?>" />
                         </div>
                     </div>
                     <div class="control-group">
@@ -65,7 +65,7 @@
                     <div class="control-group">
                         <label for="precoCompra" class="control-label">Preço de Compra<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="precoCompra" class="money" data-affixes-stay="true" data-thousands="" data-decimal="." type="text" name="precoCompra" value="<?php echo set_value('precoCompra'); ?>" />
+                            <input id="precoCompra" class="money" data-affixes-stay="true" data-thousands="" data-decimal="." type="text" name="precoCompra" value="<?= set_value('precoCompra') ?>" />
                             <strong><span style="color: red" id="errorAlert"></span><strong>
                         </div>
                     </div>
@@ -83,7 +83,7 @@
                     <div class="control-group">
                         <label for="precoVenda" class="control-label">Preço de Venda<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="precoVenda" class="money" data-affixes-stay="true" data-thousands="" data-decimal="." type="text" name="precoVenda" value="<?php echo set_value('precoVenda'); ?>" />
+                            <input id="precoVenda" class="money" data-affixes-stay="true" data-thousands="" data-decimal="." type="text" name="precoVenda" value="<?= set_value('precoVenda') ?>" />
                         </div>
                     </div>
                     <div class="control-group">
@@ -95,20 +95,20 @@
                     <div class="control-group">
                         <label for="estoque" class="control-label">Estoque<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="estoque" type="text" name="estoque" value="<?php echo set_value('estoque'); ?>" />
+                            <input id="estoque" type="text" name="estoque" value="<?= set_value('estoque') ?>" />
                         </div>
                     </div>
                     <div class="control-group">
                         <label for="estoqueMinimo" class="control-label">Estoque Mínimo</label>
                         <div class="controls">
-                            <input id="estoqueMinimo" type="text" name="estoqueMinimo" value="<?php echo set_value('estoqueMinimo'); ?>" />
+                            <input id="estoqueMinimo" type="text" name="estoqueMinimo" value="<?= set_value('estoqueMinimo') ?>" />
                         </div>
                     </div>
                     <div class="form-actions">
                         <div class="span12">
                             <div class="span6 offset3" style="display: flex;justify-content: center">
                                 <button type="submit" class="button btn btn-mini btn-success" style="max-width: 160px"><span class="button__icon"><i class='bx bx-plus-circle'></i></span><span class="button__text2">Adicionar</span></button>
-                                <a href="<?php echo base_url() ?>index.php/produtos" id="" class="button btn btn-mini btn-warning"><span class="button__icon"><i class="bx bx-undo"></i></span><span class="button__text2">Voltar</span></a>
+                                <a href="<?= base_url() ?>index.php/produtos" id="" class="button btn btn-mini btn-warning"><span class="button__icon"><i class="bx bx-undo"></i></span><span class="button__text2">Voltar</span></a>
                             </div>
                         </div>
                     </div>
@@ -118,8 +118,8 @@
     </div>
 </div>
 
-<script src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
-<script src="<?php echo base_url(); ?>assets/js/maskmoney.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
+<script src="<?= base_url() ?>assets/js/maskmoney.js"></script>
 <script type="text/javascript">
     function calcLucro(precoCompra, Lucro) {
         var lucroTipo = $('#selectLucro').val();
@@ -181,7 +181,7 @@ function atualizarPrecoVenda() {
 
     $(document).ready(function() {
         $(".money").maskMoney();
-        $.getJSON('<?php echo base_url() ?>assets/json/tabela_medidas.json', function(data) {
+        $.getJSON('<?= base_url() ?>assets/json/tabela_medidas.json', function(data) {
             for (i in data.medidas) {
                 $('#unidade').append(new Option(data.medidas[i].descricao, data.medidas[i].sigla));
             }
diff --git a/application/views/produtos/editarProduto.php b/application/views/produtos/editarProduto.php
index 83bee91e5..8c890ce12 100644
--- a/application/views/produtos/editarProduto.php
+++ b/application/views/produtos/editarProduto.php
@@ -35,19 +35,19 @@
                 <h5>Editar Produto</h5>
             </div>
             <div class="widget-content nopadding tab-content">
-                <?php echo $custom_error; ?>
-                <form action="<?php echo current_url(); ?>" id="formProduto" method="post" class="form-horizontal">
+                <?= $custom_error ?>
+                <form action="<?= current_url() ?>" id="formProduto" method="post" class="form-horizontal">
                     <div class="control-group">
-                        <?php echo form_hidden('idProdutos', $result->idProdutos) ?>
+                        <?= form_hidden('idProdutos', $result->idProdutos) ?>
                         <label for="codDeBarra" class="control-label">Código de Barra<span class=""></span></label>
                         <div class="controls">
-                            <input id="codDeBarra" type="text" name="codDeBarra" value="<?php echo $result->codDeBarra; ?>" />
+                            <input id="codDeBarra" type="text" name="codDeBarra" value="<?= esc($result->codDeBarra) ?>" />
                         </div>
                     </div>
                     <div class="control-group">
                         <label for="descricao" class="control-label">Descrição<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="descricao" type="text" name="descricao" value="<?php echo $result->descricao; ?>" />
+                            <input id="descricao" type="text" name="descricao" value="<?= esc($result->descricao) ?>" />
                         </div>
                     </div>
 
@@ -68,7 +68,7 @@
                     <div class="control-group">
                         <label for="precoCompra" class="control-label">Preço de Compra<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="precoCompra" class="money" data-affixes-stay="true" data-thousands="" data-decimal="." type="text" name="precoCompra" value="<?php echo $result->precoCompra; ?>" />
+                            <input id="precoCompra" class="money" data-affixes-stay="true" data-thousands="" data-decimal="." type="text" name="precoCompra" value="<?= esc($result->precoCompra) ?>" />
                             Margem <input style="width: 3em;" id="margemLucro" name="margemLucro" type="text" placeholder="%" maxlength="3" size="2" />
                             <strong><span style="color: red" id="errorAlert"></span><strong>
                         </div>
@@ -87,7 +87,7 @@
                     <div class="control-group">
                         <label for="precoVenda" class="control-label">Preço de Venda<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="precoVenda" class="money" data-affixes-stay="true" data-thousands="" data-decimal="." type="text" name="precoVenda" value="<?php echo $result->precoVenda; ?>" />
+                            <input id="precoVenda" class="money" data-affixes-stay="true" data-thousands="" data-decimal="." type="text" name="precoVenda" value="<?= esc($result->precoVenda) ?>" />
                         </div>
                     </div>
 
@@ -101,14 +101,14 @@
                     <div class="control-group">
                         <label for="estoque" class="control-label">Estoque<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="estoque" type="text" name="estoque" value="<?php echo $result->estoque; ?>" />
+                            <input id="estoque" type="text" name="estoque" value="<?= esc($result->estoque) ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="estoqueMinimo" class="control-label">Estoque Mínimo</label>
                         <div class="controls">
-                            <input id="estoqueMinimo" type="text" name="estoqueMinimo" value="<?php echo $result->estoqueMinimo; ?>" />
+                            <input id="estoqueMinimo" type="text" name="estoqueMinimo" value="<?= esc($result->estoqueMinimo) ?>" />
                         </div>
                     </div>
 
@@ -117,7 +117,7 @@
                             <div class="span6 offset3" style="display: flex;justify-content: center">
                                 <button type="submit" class="button btn btn-primary" style="max-width: 160px">
                                   <span class="button__icon"><i class="bx bx-sync"></i></span><span class="button__text2">Atualizar</span></button>
-                                <a href="<?php echo base_url() ?>index.php/produtos" id="" class="button btn btn-mini btn-warning">
+                                <a href="<?= base_url() ?>index.php/produtos" id="" class="button btn btn-mini btn-warning">
                                   <span class="button__icon"><i class="bx bx-undo"></i></span><span class="button__text2">Voltar</span></a>
                             </div>
                         </div>
@@ -132,8 +132,8 @@
 </div>
 
 
-<script src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
-<script src="<?php echo base_url(); ?>assets/js/maskmoney.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
+<script src="<?= base_url() ?>assets/js/maskmoney.js"></script>
 <script type="text/javascript">
     function calcLucro(precoCompra, Lucro) {
         var lucroTipo = $('#selectLucro').val();
@@ -198,10 +198,10 @@ function atualizarPrecoVenda() {
 
     $(document).ready(function() {
         $(".money").maskMoney();
-        $.getJSON('<?php echo base_url() ?>assets/json/tabela_medidas.json', function(data) {
+        $.getJSON('<?= base_url() ?>assets/json/tabela_medidas.json', function(data) {
             for (i in data.medidas) {
                 $('#unidade').append(new Option(data.medidas[i].descricao, data.medidas[i].sigla));
-                $("#unidade option[value=" + '<?php echo $result->unidade; ?>' + "]").prop("selected", true);
+                $("#unidade option[value=" + '<?= esc($result->unidade) ?>' + "]").prop("selected", true);
             }
         });
         $('#formProduto').validate({
diff --git a/application/views/produtos/produtos.php b/application/views/produtos/produtos.php
index 3cbdb0cbd..ea88163be 100644
--- a/application/views/produtos/produtos.php
+++ b/application/views/produtos/produtos.php
@@ -23,7 +23,7 @@
         <?php endif; ?>
         <form class="span9" method="get" action="<?= base_url() ?>index.php/produtos" style="display: flex; justify-content: flex-end;">
             <div class="span3">
-                <input type="text" name="pesquisa" id="pesquisa" placeholder="Buscar por Nome ou Cod. barra..." class="span12" value="<?=html_escape($this->input->get('pesquisa'))?>">
+                <input type="text" name="pesquisa" id="pesquisa" placeholder="Buscar por Nome ou Cod. barra..." class="span12" value="<?= html_escape($this->input->get('pesquisa')) ?>">
             </div>
             <div class="span1">
                 <button class="button btn btn-mini btn-warning" style="min-width: 30px">
@@ -82,11 +82,11 @@
         </div>
     </div>
 </div>
-<?php echo $this->pagination->create_links(); ?>
+<?= $this->pagination->create_links() ?>
 
 <!-- Modal -->
 <div id="modal-excluir" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form action="<?php echo base_url() ?>index.php/produtos/excluir" method="post">
+    <form action="<?= base_url() ?>index.php/produtos/excluir" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h5 id="myModalLabel"><i class="fas fa-trash-alt"></i> Excluir Produto</h5>
@@ -105,7 +105,7 @@
 
 <!-- Modal Estoque -->
 <div id="atualizar-estoque" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form action="<?php echo base_url() ?>index.php/produtos/atualizar_estoque" method="post" id="formEstoque">
+    <form action="<?= base_url() ?>index.php/produtos/atualizar_estoque" method="post" id="formEstoque">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h5 id="myModalLabel"><i class="fas fa-plus-square"></i> Atualizar Estoque</h5>
@@ -135,7 +135,7 @@
 
 <!-- Modal Etiquetas -->
 <div id="modal-etiquetas" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form action="<?php echo base_url() ?>index.php/relatorios/produtosEtiquetas" method="get">
+    <form action="<?= base_url() ?>index.php/relatorios/produtosEtiquetas" method="get">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h5 id="myModalLabel">Gerar etiquetas com Código de Barras</h5>
@@ -180,7 +180,7 @@
         </div>
     </form>
 </div>
-<script src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
 <!-- Modal Etiquetas e Estoque-->
 <script type="text/javascript">
     $(document).ready(function () {
diff --git a/application/views/produtos/visualizarProduto.php b/application/views/produtos/visualizarProduto.php
index 8833e7c18..648d90d0b 100644
--- a/application/views/produtos/visualizarProduto.php
+++ b/application/views/produtos/visualizarProduto.php
@@ -15,43 +15,43 @@
                         <tr>
                             <td style="text-align: center; width: 30%"><strong>Código de Barra</strong></td>
                             <td>
-                                <?php echo html_escape($result->codDeBarra) ?>
+                                <?= html_escape($result->codDeBarra) ?>
                             </td>
                         </tr>
                         <tr>
                             <td style="text-align: right; width: 30%"><strong>Descrição</strong></td>
                             <td>
-                                <?php echo html_escape($result->descricao) ?>
+                                <?= html_escape($result->descricao) ?>
                             </td>
                         </tr>
                         <tr>
                             <td style="text-align: right"><strong>Unidade</strong></td>
                             <td>
-                                <?php echo html_escape($result->unidade) ?>
+                                <?= html_escape($result->unidade) ?>
                             </td>
                         </tr>
                         <tr>
                             <td style="text-align: right"><strong>Preço de Compra</strong></td>
                             <td>R$
-                                <?php echo html_escape($result->precoCompra); ?>
+                                <?= html_escape($result->precoCompra) ?>
                             </td>
                         </tr>
                         <tr>
                             <td style="text-align: right"><strong>Preço de Venda</strong></td>
                             <td>R$
-                                <?php echo html_escape($result->precoVenda); ?>
+                                <?= html_escape($result->precoVenda) ?>
                             </td>
                         </tr>
                         <tr>
                             <td style="text-align: right"><strong>Estoque</strong></td>
                             <td>
-                                <?php echo html_escape($result->estoque); ?>
+                                <?= html_escape($result->estoque) ?>
                             </td>
                         </tr>
                         <tr>
                             <td style="text-align: right"><strong>Estoque Mínimo</strong></td>
                             <td>
-                                <?php echo html_escape($result->estoqueMinimo); ?>
+                                <?= html_escape($result->estoqueMinimo) ?>
                             </td>
                         </tr>
                     </tbody>
diff --git a/application/views/relatorios/imprimir/imprimirClientes.php b/application/views/relatorios/imprimir/imprimirClientes.php
index 4a6d17319..4d3059d55 100755
--- a/application/views/relatorios/imprimir/imprimirClientes.php
+++ b/application/views/relatorios/imprimir/imprimirClientes.php
@@ -6,11 +6,11 @@
     <meta charset="UTF-8" />
     <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/fullcalendar.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/main.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/blue.css" class="skin-color" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/fullcalendar.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/main.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/blue.css" class="skin-color" />
 </head>
 
 <body style="background-color: transparent">
@@ -39,11 +39,11 @@
                                     <?php foreach ($clientes as $c) : ?>
                                     <?php $dataCadastro = date('d/m/Y', strtotime($c->dataCadastro)) ?>
                                     <tr>
-                                        <td><?= $c->nomeCliente ?></td>
-                                        <td align="center"><?= $c->documento ?></td>
-                                        <td align="center"><?= $c->telefone ?></td>
-                                        <td align="center"><?= $c->email ?></td>
-                                        <td align="center"><?= $dataCadastro ?></td>
+                                        <td><?= esc($c->nomeCliente) ?></td>
+                                        <td align="center"><?= esc($c->documento) ?></td>
+                                        <td align="center"><?= esc($c->telefone) ?></td>
+                                        <td align="center"><?= esc($c->email) ?></td>
+                                        <td align="center"><?= esc($dataCadastro) ?></td>
                                     </tr>
                                     <?php endforeach ?>
                                 </tbody>
@@ -53,7 +53,7 @@
 
                 </div>
                 <h5 style="text-align: right; font-size: 0.8em; padding: 5px;">Data do Relatório:
-                    <?php echo date('d/m/Y'); ?>
+                    <?= date('d/m/Y') ?>
                 </h5>
 
             </div>
diff --git a/application/views/relatorios/imprimir/imprimirEtiquetas.php b/application/views/relatorios/imprimir/imprimirEtiquetas.php
index bf93ede51..53eb37c20 100755
--- a/application/views/relatorios/imprimir/imprimirEtiquetas.php
+++ b/application/views/relatorios/imprimir/imprimirEtiquetas.php
@@ -6,7 +6,7 @@
 	<meta charset="UTF-8" />
 	<meta name="viewport" content="width=device-width, initial-scale=1.0" />
 	<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
-	<link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/mpdf-barcode.css" />
+	<link rel="stylesheet" href="<?= base_url() ?>assets/css/mpdf-barcode.css" />
 
 </head>
 
@@ -17,141 +17,153 @@
 			<div class="span12">
 				<div class="widget-box">
 					<div class="widget-content nopadding tab-content">
-						<?php
-                        if (
-                            $this->input->get("etiquetaCode") !== "EAN13" && $this->input->get("etiquetaCode") !== "QR"
-                            && $this->input->get("etiquetaCode") !== "UPCA"
-                        ) {
-                            if (isset($_GET['qtdEtiqueta'])) {
-                                foreach ($produtos as $p) {
-                                    for ($i = 0; $p->estoque >  $i++;) {
-                                        ?>
+					<?php
+                        // O tipo de codigo de barras vem da query string e e
+                        // usado tanto no `if` abaixo quanto no atributo `type` do
+                        // <barcode>. Sem uma lista branca o valor refletido
+                        // permitiria breakout do atributo (XSS refletido).
+                        // A lista deve acompanhar as opcoes de
+                        // application/views/produtos/produtos.php.
+                        $tiposPermitidos = ['EAN13', 'UPCA', 'C93', 'C128A', 'CODABAR', 'QR'];
+	$tipoEtiqueta = (string) $this->input->get('etiquetaCode');
+	if (! in_array($tipoEtiqueta, $tiposPermitidos, true)) {
+	    $tipoEtiqueta = 'EAN13';
+	}
+
+	$qtdEtiqueta = $this->input->get('qtdEtiqueta');
+	?>
+					<?php
+	if ($tipoEtiqueta !== 'EAN13' && $tipoEtiqueta !== 'QR' && $tipoEtiqueta !== 'UPCA') {
+	    if (isset($qtdEtiqueta)) {
+	        foreach ($produtos as $p) {
+	            for ($i = 0; $p->estoque >  $i++;) {
+	                ?>
 							<div class="detalheProdutoEtiqueta">
 								<div class="descricaoProdutoEtiqueta">
 									<?php $string = strtoupper($p->descricao); ?>
 									<div>
 										<strong>
-											<?php print(limitarTexto($string, $limite = 23)); ?>
+											<?= (esc(limitarTexto($string, $limite = 23))) ?>
 										</strong>
 									</div>
 								</div>
 								<div class="textoProdutoEtiqueta">Cod:
 									<b>
-										<?php echo $p->idProdutos; ?>
+										<?= esc($p->idProdutos) ?>
 									</b>
 									<br /> Preço: R$
 									<b>
 										<?php $precoVenda = str_replace(".", ",", $p->precoVenda);
-                                        echo $precoVenda; ?>
+	                echo esc($precoVenda); ?>
 									</b>
 								</div>
 								<div class="barcodecell">
-									<barcode code="<?= $p->codDeBarra ?>" text="0" type="<?= $this->input->get("etiquetaCode") ?>" size="0.7" disableborder="0"
+									<barcode code="<?= esc($p->codDeBarra) ?>" text="0" type="<?= esc($tipoEtiqueta) ?>" size="0.7" disableborder="0"
 									 class="barcode" />
 								</div>
 							</div>
 							<?php
-                                    }
-                                }
-                            } else {
-                                foreach ($produtos as $p) {
-                                    ?>
+	            }
+	        }
+	    } else {
+	        foreach ($produtos as $p) {
+	            ?>
 							<div class="detalheProdutoEtiqueta">
 								<div class="descricaoProdutoEtiqueta">
 									<?php $string = strtoupper($p->descricao); ?>
 									<div>
 										<strong>
-											<?php print(limitarTexto($string, $limite = 23)); ?>
+											<?= (esc(limitarTexto($string, $limite = 23))) ?>
 										</strong>
 									</div>
 								</div>
 								<div class="textoProdutoEtiqueta">Cod:
 									<b>
-										<?php echo $p->idProdutos; ?>
+										<?= esc($p->idProdutos) ?>
 									</b>
 									<br /> Preço: R$
 									<b>
 										<?php $precoVenda = str_replace(".", ",", $p->precoVenda);
-                                    echo $precoVenda; ?>
+	            echo esc($precoVenda); ?>
 									</b>
 								</div>
 
 								<div class="barcodecell">
-									<barcode code="<?= $p->codDeBarra ?>" text="0" type="<?= $this->input->get("etiquetaCode") ?>" size="0.7" disableborder="0"
+									<barcode code="<?= esc($p->codDeBarra) ?>" text="0" type="<?= esc($tipoEtiqueta) ?>" size="0.7" disableborder="0"
 									 class="barcode" />
 								</div>
 
 							</div>
 							<?php
-                                }
-                            }
-                        } else {
-                            if (isset($_GET['qtdEtiqueta'])) {
-                                foreach ($produtos as $p) {
-                                    for ($i = 0; $p->estoque >  $i++;) {
-                                        ?>
+	        }
+	    }
+	} else {
+	    if (isset($qtdEtiqueta)) {
+	        foreach ($produtos as $p) {
+	            for ($i = 0; $p->estoque >  $i++;) {
+	                ?>
 							<div class="detalheProdutoEtiquetaEan13">
 								<div class="descricaoProdutoEtiqueta">
 									<?php $string = strtoupper($p->descricao); ?>
 									<div>
 										<strong>
-											<?php print(limitarTexto($string, $limite = 23)); ?>
+											<?= (esc(limitarTexto($string, $limite = 23))) ?>
 										</strong>
 									</div>
 								</div>
 								<div class="textoProdutoEtiqueta">Cod:
 									<b>
-										<?php echo $p->idProdutos; ?>
+										<?= esc($p->idProdutos) ?>
 									</b>
 									<br /> Preço: R$
 									<b>
 										<?php $precoVenda = str_replace(".", ",", $p->precoVenda);
-                                        echo $precoVenda; ?>
+	                echo esc($precoVenda); ?>
 									</b>
 								</div>
 								<div class="barcodecell">
-									<barcode code="<?= $p->codDeBarra ?>" text="0" type="<?= $this->input->get("etiquetaCode") ?>" size="0.62" disableborder="0"
+									<barcode code="<?= esc($p->codDeBarra) ?>" text="0" type="<?= esc($tipoEtiqueta) ?>" size="0.62" disableborder="0"
 									 class="barcode" />
 								</div>
 							</div>
 
 
 							<?php
-                                    }
-                                }
-                            } else {
-                                foreach ($produtos as $p) {
-                                    ?>
+	            }
+	        }
+	    } else {
+	        foreach ($produtos as $p) {
+	            ?>
 							<div class="detalheProdutoEtiquetaEan13">
 								<div class="descricaoProdutoEtiqueta">
 									<?php $string = strtoupper($p->descricao); ?>
 									<div>
 										<strong>
-											<?php print(limitarTexto($string, $limite = 23)); ?>
+											<?= (esc(limitarTexto($string, $limite = 23))) ?>
 										</strong>
 									</div>
 								</div>
 								<div class="textoProdutoEtiqueta">Cod:
 									<b>
-										<?php echo $p->idProdutos; ?>
+										<?= esc($p->idProdutos) ?>
 									</b>
 									<br /> Preço: R$
 									<b>
 										<?php $precoVenda = str_replace(".", ",", $p->precoVenda);
-                                    echo $precoVenda; ?>
+	            echo esc($precoVenda); ?>
 									</b>
 								</div>
 
 								<div class="barcodecell">
-									<barcode code="<?= $p->codDeBarra ?>" text="0" type="<?= $this->input->get("etiquetaCode") ?>" size="0.62" disableborder="0"
+									<barcode code="<?= esc($p->codDeBarra) ?>" text="0" type="<?= esc($tipoEtiqueta) ?>" size="0.62" disableborder="0"
 									 class="barcode" />
 								</div>
 
 							</div>
 							<?php
-                                }
-                            }
-                        }
+	        }
+	    }
+	}
 	?>
 
 					</div>
diff --git a/application/views/relatorios/imprimir/imprimirFinanceiro.php b/application/views/relatorios/imprimir/imprimirFinanceiro.php
index 0adcec980..4341c128e 100755
--- a/application/views/relatorios/imprimir/imprimirFinanceiro.php
+++ b/application/views/relatorios/imprimir/imprimirFinanceiro.php
@@ -6,11 +6,11 @@
     <meta charset="UTF-8" />
     <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/fullcalendar.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/main.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/blue.css" class="skin-color" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/fullcalendar.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/main.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/blue.css" class="skin-color" />
 </head>
 
 <body style="background-color: transparent">
@@ -81,7 +81,7 @@
                                     </td>
                                     <td colspan="2" style="text-align: left; color: green">
                                         <strong>R$
-                                            <?php echo number_format($totalReceita, 2, ',', '.') ?>
+                                            <?= number_format($totalReceita, 2, ',', '.') ?>
                                         </strong>
                                     </td>
                                 </tr>
@@ -91,7 +91,7 @@
                                     </td>
                                     <td colspan="2" style="text-align: left; color: red">
                                         <strong>R$
-                                            <?php echo number_format($totalDespesa, 2, ',', '.') ?>
+                                            <?= number_format($totalDespesa, 2, ',', '.') ?>
                                         </strong>
                                     </td>
                                 </tr>
@@ -101,7 +101,7 @@
                                     </td>
                                     <td colspan="2" style="text-align: left;">
                                         <strong>R$
-                                            <?php echo number_format($totalReceita - $totalDespesa, 2, ',', '.') ?>
+                                            <?= number_format($totalReceita - $totalDespesa, 2, ',', '.') ?>
                                         </strong>
                                     </td>
                                 </tr>
@@ -110,7 +110,7 @@
                     </div>
                 </div>
                 <h5 style="text-align: right">Data do Relatório:
-                    <?php echo date('d/m/Y'); ?>
+                    <?= date('d/m/Y') ?>
                 </h5>
 
             </div>
diff --git a/application/views/relatorios/imprimir/imprimirOs.php b/application/views/relatorios/imprimir/imprimirOs.php
index 4d1ef4621..a94a8defd 100755
--- a/application/views/relatorios/imprimir/imprimirOs.php
+++ b/application/views/relatorios/imprimir/imprimirOs.php
@@ -6,11 +6,11 @@
     <meta charset="UTF-8" />
     <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/fullcalendar.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/main.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/blue.css" class="skin-color" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/fullcalendar.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/main.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/blue.css" class="skin-color" />
 </head>
 
 <body style="background-color: transparent">
@@ -71,7 +71,7 @@
                     </div>
                 </div>
 
-                <h5 style="text-align: right; font-size: 0.8em; padding: 5px;">Data do Relatório: <?php echo date('d/m/Y'); ?>
+                <h5 style="text-align: right; font-size: 0.8em; padding: 5px;">Data do Relatório: <?= date('d/m/Y') ?>
             </div>
         </div>
     </div>
diff --git a/application/views/relatorios/imprimir/imprimirProdutos.php b/application/views/relatorios/imprimir/imprimirProdutos.php
index 29645d56f..eedf3bf9d 100755
--- a/application/views/relatorios/imprimir/imprimirProdutos.php
+++ b/application/views/relatorios/imprimir/imprimirProdutos.php
@@ -6,11 +6,11 @@
     <meta charset="UTF-8" />
     <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/fullcalendar.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/main.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/blue.css" class="skin-color" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/fullcalendar.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/main.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/blue.css" class="skin-color" />
 </head>
 
 <body style="background-color: transparent">
@@ -73,7 +73,7 @@
                     </div>
                 </div>
                 <h5 style="text-align: right; font-size: 0.8em; padding: 5px;">
-                    Data do Relatório: <?php echo date('d/m/Y'); ?>
+                    Data do Relatório: <?= date('d/m/Y') ?>
                 </h5>
             </div>
         </div>
diff --git a/application/views/relatorios/imprimir/imprimirSKU.php b/application/views/relatorios/imprimir/imprimirSKU.php
index c1c9759b9..edfa52b7c 100755
--- a/application/views/relatorios/imprimir/imprimirSKU.php
+++ b/application/views/relatorios/imprimir/imprimirSKU.php
@@ -6,11 +6,11 @@
     <meta charset="UTF-8" />
     <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/fullcalendar.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/main.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/blue.css" class="skin-color" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/fullcalendar.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/main.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/blue.css" class="skin-color" />
 </head>
 
 <body style="background-color: transparent">
@@ -60,7 +60,7 @@
                     </div>
                 </div>
 
-                <h5 style="text-align: right">Data do Relatório: <?php echo date('d/m/Y'); ?>
+                <h5 style="text-align: right">Data do Relatório: <?= date('d/m/Y') ?>
                 </h5>
             </div>
         </div>
diff --git a/application/views/relatorios/imprimir/imprimirServicos.php b/application/views/relatorios/imprimir/imprimirServicos.php
index 4a7b7d004..17dd04f83 100755
--- a/application/views/relatorios/imprimir/imprimirServicos.php
+++ b/application/views/relatorios/imprimir/imprimirServicos.php
@@ -6,11 +6,11 @@
     <meta charset="UTF-8" />
     <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/fullcalendar.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/main.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/blue.css" class="skin-color" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/fullcalendar.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/main.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/blue.css" class="skin-color" />
 </head>
 
 <body style="background-color: transparent">
@@ -47,7 +47,7 @@
                         </table>
                     </div>
                 </div>
-                <h5 style="text-align: right; font-size: 0.8em; padding: 5px;">Data do Relatório: <?php echo date('d/m/Y'); ?>
+                <h5 style="text-align: right; font-size: 0.8em; padding: 5px;">Data do Relatório: <?= date('d/m/Y') ?>
                 </h5>
             </div>
         </div>
diff --git a/application/views/relatorios/imprimir/imprimirTopo.php b/application/views/relatorios/imprimir/imprimirTopo.php
index 6287b4761..8012d388e 100755
--- a/application/views/relatorios/imprimir/imprimirTopo.php
+++ b/application/views/relatorios/imprimir/imprimirTopo.php
@@ -3,25 +3,25 @@
         <br>
         <div style="width: 50%; float: left" class="float-left col-md-3">
             <?php if (file_exists(convertUrlToUploadsPath($emitente->url_logo))) { ?>
-                <img style="width: 150px" src="<?= convertUrlToUploadsPath($emitente->url_logo) ?>" alt="<?= $emitente->nome ?>"><br><br>
+                <img style="width: 150px" src="<?= convertUrlToUploadsPath($emitente->url_logo) ?>" alt="<?= esc($emitente->nome) ?>"><br><br>
             <?php } else { ?>
                 <div style="width: 150px;"><p></p></div>
             <?php } ?>
         </div>
         <div style="float: right">
-            <b>EMPRESA: </b> <?= $emitente->nome ?> <b>CNPJ: </b> <?= $emitente->cnpj ?><br>
-            <b>ENDEREÇO: </b> <?= $emitente->rua ?>, <?= $emitente->numero ?>, <?= $emitente->bairro ?>, <?= $emitente->cidade ?> - <?= $emitente->uf ?> <br>
+            <b>EMPRESA: </b> <?= esc($emitente->nome) ?> <b>CNPJ: </b> <?= esc($emitente->cnpj) ?><br>
+            <b>ENDEREÇO: </b> <?= esc($emitente->rua) ?>, <?= esc($emitente->numero) ?>, <?= esc($emitente->bairro) ?>, <?= esc($emitente->cidade) ?> - <?= esc($emitente->uf) ?> <br>
 
             <?php if (isset($title)): ?>
-                <b>RELATÓRIO: </b> <?= $title ?> <br>
+                <b>RELATÓRIO: </b> <?= esc($title) ?> <br>
             <?php endif ?>
 
             <?php if (isset($dataInicial)): ?>
-                <b>DATA INICIAL: </b> <?= $dataInicial ?>
+                <b>DATA INICIAL: </b> <?= esc($dataInicial) ?>
             <?php endif ?>
 
             <?php if (isset($dataFinal)): ?>
-                <b>DATA FINAL: </b> <?= $dataFinal ?>
+                <b>DATA FINAL: </b> <?= esc($dataFinal) ?>
             <?php endif ?>
         </div>
     </div>
diff --git a/application/views/relatorios/imprimir/imprimirVendas.php b/application/views/relatorios/imprimir/imprimirVendas.php
index bed98710b..50c965a6b 100755
--- a/application/views/relatorios/imprimir/imprimirVendas.php
+++ b/application/views/relatorios/imprimir/imprimirVendas.php
@@ -6,11 +6,11 @@
     <meta charset="UTF-8" />
     <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/fullcalendar.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/main.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/blue.css" class="skin-color" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/fullcalendar.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/main.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/blue.css" class="skin-color" />
 </head>
 
 <body style="background-color: transparent">
@@ -68,7 +68,7 @@
                     </div>
                 </div>
                 <h5 style="text-align: right; font-size: 0.8em; padding: 5px;">
-                    Data do Relatório: <?php echo date('d/m/Y'); ?>
+                    Data do Relatório: <?= date('d/m/Y') ?>
                 </h5>
             </div>
         </div>
diff --git a/application/views/relatorios/rel_clientes.php b/application/views/relatorios/rel_clientes.php
index 406420e6c..7e5c88df4 100755
--- a/application/views/relatorios/rel_clientes.php
+++ b/application/views/relatorios/rel_clientes.php
@@ -9,9 +9,9 @@
             </div>
             <div class="widget-content">
                 <ul style="flex-direction: row;" class="site-stats">
-                    <li><a href="<?php echo base_url() ?>index.php/relatorios/clientesRapid" target="_blank"><i
+                    <li><a href="<?= base_url() ?>index.php/relatorios/clientesRapid" target="_blank"><i
                                     class="fas fa-users"></i> <small>Todos os Clientes - pdf</small></a></li>
-                    <li><a href="<?php echo base_url() ?>index.php/relatorios/clientesRapid?format=xls" target="_blank"><i
+                    <li><a href="<?= base_url() ?>index.php/relatorios/clientesRapid?format=xls" target="_blank"><i
                                     class="fas fa-users"></i> <small>Todos os Clientes - xls</small></a></li>
                 </ul>
             </div>
@@ -28,7 +28,7 @@ class="fas fa-users"></i> <small>Todos os Clientes - xls</small></a></li>
             </div>
             <div class="widget-content">
                 <div class="span12 well">
-                    <form target="_blank" action="<?php echo base_url() ?>index.php/relatorios/clientesCustom"
+                    <form target="_blank" action="<?= base_url() ?>index.php/relatorios/clientesCustom"
                           method="get">
                         <div class="span4">
                             <label for="">Cadastrado de:</label>
diff --git a/application/views/relatorios/rel_financeiro.php b/application/views/relatorios/rel_financeiro.php
index 260c8c2d1..2f95f4354 100755
--- a/application/views/relatorios/rel_financeiro.php
+++ b/application/views/relatorios/rel_financeiro.php
@@ -9,8 +9,8 @@
             </div>
             <div class="widget-content">
                 <ul style="flex-direction: row;" class="site-stats">
-                    <li><a target="_blank" href="<?php echo base_url() ?>index.php/relatorios/financeiroRapid"><i class="fas fa-hand-holding-usd"></i> <small>Relatório do mês - pdf</small></a></li>
-                    <li><a target="_blank" href="<?php echo base_url() ?>index.php/relatorios/financeiroRapid?format=xls"><i class="fas fa-hand-holding-usd"></i> <small>Relatório do mês - xls</small></a></li>
+                    <li><a target="_blank" href="<?= base_url() ?>index.php/relatorios/financeiroRapid"><i class="fas fa-hand-holding-usd"></i> <small>Relatório do mês - pdf</small></a></li>
+                    <li><a target="_blank" href="<?= base_url() ?>index.php/relatorios/financeiroRapid?format=xls"><i class="fas fa-hand-holding-usd"></i> <small>Relatório do mês - xls</small></a></li>
                 </ul>
             </div>
         </div>
@@ -25,7 +25,7 @@
                 <h5>Relatórios Customizáveis</h5>
             </div>
             <div class="widget-content">
-                <form target="_blank" action="<?php echo base_url() ?>index.php/relatorios/financeiroCustom" method="get">
+                <form target="_blank" action="<?= base_url() ?>index.php/relatorios/financeiroCustom" method="get">
                     <div class="span12 well">
 
                         <div class="span6">
diff --git a/application/views/relatorios/rel_os.php b/application/views/relatorios/rel_os.php
index 9996d629c..e742c8594 100755
--- a/application/views/relatorios/rel_os.php
+++ b/application/views/relatorios/rel_os.php
@@ -9,8 +9,8 @@
             </div>
             <div class="widget-content">
                 <ul style="flex-direction: row;" class="site-stats">
-                    <li><a target="_blank" href="<?php echo base_url() ?>index.php/relatorios/osRapid"><i class="fas fa-diagnoses"></i> <small>Todas as OS - pdf</small></a></li>
-                    <li><a target="_blank" href="<?php echo base_url() ?>index.php/relatorios/osRapid?format=xls"><i class="fas fa-diagnoses"></i> <small>Todas as OS - xls</small></a></li>
+                    <li><a target="_blank" href="<?= base_url() ?>index.php/relatorios/osRapid"><i class="fas fa-diagnoses"></i> <small>Todas as OS - pdf</small></a></li>
+                    <li><a target="_blank" href="<?= base_url() ?>index.php/relatorios/osRapid?format=xls"><i class="fas fa-diagnoses"></i> <small>Todas as OS - xls</small></a></li>
                 </ul>
             </div>
         </div>
@@ -25,7 +25,7 @@
             </div>
             <div class="widget-content">
                 <div class="span12 well">
-                    <form target="_blank" action="<?php echo base_url() ?>index.php/relatorios/osCustom" method="get">
+                    <form target="_blank" action="<?= base_url() ?>index.php/relatorios/osCustom" method="get">
                         <div class="span12 well">
                             <div class="span6">
                                 <label for="">Data de:</label>
@@ -87,21 +87,21 @@
         </div>
     </div>
 </div>
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
-<script src="<?php echo base_url(); ?>assets/js/maskmoney.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
+<script src="<?= base_url() ?>assets/js/maskmoney.js"></script>
 <script type="text/javascript">
     $(document).ready(function() {
         $(".money").maskMoney();
         $("#cliente").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/os/autoCompleteCliente",
+            source: "<?= base_url() ?>index.php/os/autoCompleteCliente",
             minLength: 2,
             select: function(event, ui) {
                 $("#clienteHide").val(ui.item.id);
             }
         });
         $("#tecnico").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/os/autoCompleteUsuario",
+            source: "<?= base_url() ?>index.php/os/autoCompleteUsuario",
             minLength: 2,
             select: function(event, ui) {
                 $("#responsavelHide").val(ui.item.id);
diff --git a/application/views/relatorios/rel_os_topo.php b/application/views/relatorios/rel_os_topo.php
index 72314fdb1..05d29bf54 100755
--- a/application/views/relatorios/rel_os_topo.php
+++ b/application/views/relatorios/rel_os_topo.php
@@ -1,14 +1,14 @@
 <table class="table table-bordered table-condensed">
     <tr>
         <td style="width: 180px">
-            <img style="width: 150px;" src="<?=$em_logo?>">
+            <img style="width: 150px;" src="<?= esc($em_logo) ?>">
         </td>
 
         <td>
-            <b>Empresa: </b> <?=$em_nome?> <br>
-            <b>CNPJ: </b> <?=$em_cnpj?><br>
-            <b>Responsável: </b> <?=$res_nome?><br>
-            <b>Data Inicial: </b> <?=$dataInicial?> <b>Data Final: </b> <?=$dataFinal?>
+            <b>Empresa: </b> <?= esc($em_nome) ?> <br>
+            <b>CNPJ: </b> <?= esc($em_cnpj) ?><br>
+            <b>Responsável: </b> <?= esc($res_nome) ?><br>
+            <b>Data Inicial: </b> <?= esc($dataInicial) ?> <b>Data Final: </b> <?= esc($dataFinal) ?>
 
         </td>
     </tr>
diff --git a/application/views/relatorios/rel_produtos.php b/application/views/relatorios/rel_produtos.php
index 78514c2fc..8d92f26aa 100755
--- a/application/views/relatorios/rel_produtos.php
+++ b/application/views/relatorios/rel_produtos.php
@@ -9,8 +9,8 @@
             </div>
             <div class="widget-content">
                 <ul style="flex-direction: row;" class="site-stats">
-                    <li><a target="_blank" href="<?php echo base_url() ?>index.php/relatorios/produtosRapid"><i class="fas fa-shopping-bag"></i> <small>Todos os Produtos</small></a></li>
-                    <li><a target="_blank" href="<?php echo base_url() ?>index.php/relatorios/produtosRapidMin"><i class="fas fa-shopping-bag"></i> <small>Com Estoque Mínimo</small></a></li>
+                    <li><a target="_blank" href="<?= base_url() ?>index.php/relatorios/produtosRapid"><i class="fas fa-shopping-bag"></i> <small>Todos os Produtos</small></a></li>
+                    <li><a target="_blank" href="<?= base_url() ?>index.php/relatorios/produtosRapidMin"><i class="fas fa-shopping-bag"></i> <small>Com Estoque Mínimo</small></a></li>
                 </ul>
             </div>
         </div>
@@ -26,7 +26,7 @@
             <div class="widget-content">
                 <div class="span12 well">
                     <div class="span12 alert alert-info">Deixe em branco caso não deseje utilizar o parâmetro.</div>
-                    <form target="_blank" action="<?php echo base_url() ?>index.php/relatorios/produtosCustom" method="get">
+                    <form target="_blank" action="<?= base_url() ?>index.php/relatorios/produtosCustom" method="get">
                         <div class="span12 well">
                             <div class="span6">
                                 <label for="">Preço de Venda de:</label>
@@ -63,7 +63,7 @@
         </div>
     </div>
 </div>
-<script src="<?php echo base_url(); ?>assets/js/maskmoney.js"></script>
+<script src="<?= base_url() ?>assets/js/maskmoney.js"></script>
 <script type="text/javascript">
     $(document).ready(function() {
         $(".money").maskMoney();
diff --git a/application/views/relatorios/rel_receitas_brutas_mei.php b/application/views/relatorios/rel_receitas_brutas_mei.php
index 41dfc3cd2..7d0139c7a 100644
--- a/application/views/relatorios/rel_receitas_brutas_mei.php
+++ b/application/views/relatorios/rel_receitas_brutas_mei.php
@@ -1,4 +1,4 @@
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
+<link rel="stylesheet" href="<?= base_url() ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
 
 <div class="row-fluid" style="margin-top: 0">
     <div class="span4">
@@ -11,8 +11,8 @@
             </div>
             <div class="widget-content">
                 <ul style="flex-direction: row;" class="site-stats">
-                    <li><a target="_blank" href="<?php echo base_url() ?>index.php/relatorios/receitasBrutasRapid?format=docx"><i class="fas fa-shopping-bag"></i> <small>Receitas Brutas MEI - mês atual - docx</small></a></li>
-                    <li><a target="_blank" href="<?php echo base_url() ?>index.php/relatorios/receitasBrutasRapid?format=pdf"><i class="fas fa-shopping-bag"></i> <small>Receitas Brutas MEI - mês atual - pdf</small></a></li>
+                    <li><a target="_blank" href="<?= base_url() ?>index.php/relatorios/receitasBrutasRapid?format=docx"><i class="fas fa-shopping-bag"></i> <small>Receitas Brutas MEI - mês atual - docx</small></a></li>
+                    <li><a target="_blank" href="<?= base_url() ?>index.php/relatorios/receitasBrutasRapid?format=pdf"><i class="fas fa-shopping-bag"></i> <small>Receitas Brutas MEI - mês atual - pdf</small></a></li>
                 </ul>
             </div>
         </div>
@@ -27,7 +27,7 @@
                 <h5>Relatórios Customizáveis</h5>
             </div>
             <div class="widget-content">
-                <form target="_blank" action="<?php echo base_url() ?>index.php/relatorios/receitasBrutasCustom" method="get">
+                <form target="_blank" action="<?= base_url() ?>index.php/relatorios/receitasBrutasCustom" method="get">
                     <div class="span12 well">
                         <div class="span6">
                             <label for="">Data de ocorrência de:</label>
@@ -64,5 +64,5 @@
     </div>
 </div>
 </div>
-<script src="<?php echo base_url(); ?>assets/js/maskmoney.js"></script>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
+<script src="<?= base_url() ?>assets/js/maskmoney.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
diff --git a/application/views/relatorios/rel_servicos.php b/application/views/relatorios/rel_servicos.php
index 028922c8f..2bd2423be 100755
--- a/application/views/relatorios/rel_servicos.php
+++ b/application/views/relatorios/rel_servicos.php
@@ -9,7 +9,7 @@
             </div>
             <div class="widget-content">
                 <ul style="flex-direction: row;" class="site-stats">
-                    <li><a target="_blank" href="<?php echo base_url() ?>index.php/relatorios/servicosRapid"><i class="fas fa-wrench"></i> <small>Todos os Serviços</small></a></li>
+                    <li><a target="_blank" href="<?= base_url() ?>index.php/relatorios/servicosRapid"><i class="fas fa-wrench"></i> <small>Todos os Serviços</small></a></li>
                 </ul>
             </div>
         </div>
@@ -24,7 +24,7 @@
             </div>
             <div class="widget-content">
                 <div class="span12 well">
-                    <form target="_blank" action="<?php echo base_url() ?>index.php/relatorios/servicosCustom" method="get">
+                    <form target="_blank" action="<?= base_url() ?>index.php/relatorios/servicosCustom" method="get">
                         <div class="span12 well">
                             <div class="span6">
                                 <label for="">Preço de:</label>
@@ -51,7 +51,7 @@
         </div>
     </div>
 </div>
-<script src="<?php echo base_url(); ?>assets/js/maskmoney.js"></script>
+<script src="<?= base_url() ?>assets/js/maskmoney.js"></script>
 <script type="text/javascript">
     $(document).ready(function() {
         $(".money").maskMoney();
diff --git a/application/views/relatorios/rel_sku.php b/application/views/relatorios/rel_sku.php
index 2ffa2ede7..6616f448e 100755
--- a/application/views/relatorios/rel_sku.php
+++ b/application/views/relatorios/rel_sku.php
@@ -1,4 +1,4 @@
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
+<link rel="stylesheet" href="<?= base_url() ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
 
 <div class="row-fluid" style="margin-top: 0">
     <div class="span4">
@@ -11,8 +11,8 @@
             </div>
             <div class="widget-content">
                 <ul style="flex-direction: row;" class="site-stats">
-                    <li><a target="_blank" href="<?php echo base_url() ?>index.php/relatorios/skuRapid"><i class="fas fa-shopping-bag"></i> <small>SKU rápido - pdf</small></a></li>
-                    <li><a target="_blank" href="<?php echo base_url() ?>index.php/relatorios/skuRapid?format=xls"><i class="fas fa-shopping-bag"></i> <small>SKU rápido - xls</small></a></li>
+                    <li><a target="_blank" href="<?= base_url() ?>index.php/relatorios/skuRapid"><i class="fas fa-shopping-bag"></i> <small>SKU rápido - pdf</small></a></li>
+                    <li><a target="_blank" href="<?= base_url() ?>index.php/relatorios/skuRapid?format=xls"><i class="fas fa-shopping-bag"></i> <small>SKU rápido - xls</small></a></li>
                 </ul>
             </div>
         </div>
@@ -27,7 +27,7 @@
                 <h5>Relatórios Customizáveis</h5>
             </div>
             <div class="widget-content">
-                <form target="_blank" action="<?php echo base_url() ?>index.php/relatorios/skuCustom" method="get">
+                <form target="_blank" action="<?= base_url() ?>index.php/relatorios/skuCustom" method="get">
                     <div class="span12 well">
                         <div class="span6">
                             <label for="">Data de ocorrência de:</label>
@@ -82,14 +82,14 @@
     </div>
 </div>
 </div>
-<script src="<?php echo base_url(); ?>assets/js/maskmoney.js"></script>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
+<script src="<?= base_url() ?>assets/js/maskmoney.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
 <script type="text/javascript">
     $(document).ready(function() {
         $(".money").maskMoney();
 
         $("#cliente").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/os/autoCompleteCliente",
+            source: "<?= base_url() ?>index.php/os/autoCompleteCliente",
             minLength: 2,
             select: function(event, ui) {
                 $("#clientes_id").val(ui.item.id);
diff --git a/application/views/relatorios/rel_vendas.php b/application/views/relatorios/rel_vendas.php
index 09a820f08..a37d40dd1 100755
--- a/application/views/relatorios/rel_vendas.php
+++ b/application/views/relatorios/rel_vendas.php
@@ -9,8 +9,8 @@
             </div>
             <div class="widget-content">
                 <ul style="flex-direction: row;" class="site-stats">
-                    <li><a target="_blank" href="<?php echo base_url() ?>index.php/relatorios/vendasRapid"><i class="fas fa-cash-register"></i> <small>Todas as Vendas - pdf</small></a></li>
-                    <li><a target="_blank" href="<?php echo base_url() ?>index.php/relatorios/vendasRapid?format=xls"><i class="fas fa-cash-register"></i> <small>Todas as Vendas - xls</small></a></li>
+                    <li><a target="_blank" href="<?= base_url() ?>index.php/relatorios/vendasRapid"><i class="fas fa-cash-register"></i> <small>Todas as Vendas - pdf</small></a></li>
+                    <li><a target="_blank" href="<?= base_url() ?>index.php/relatorios/vendasRapid?format=xls"><i class="fas fa-cash-register"></i> <small>Todas as Vendas - xls</small></a></li>
                 </ul>
             </div>
         </div>
@@ -25,7 +25,7 @@
             </div>
             <div class="widget-content">
                 <div class="span12 well">
-                    <form target="_blank" action="<?php echo base_url() ?>index.php/relatorios/vendasCustom" method="get">
+                    <form target="_blank" action="<?= base_url() ?>index.php/relatorios/vendasCustom" method="get">
                         <div class="span12 well">
                             <div class="span6">
                                 <label for="">Data de:</label>
@@ -72,21 +72,21 @@
         </div>
     </div>
 </div>
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
-<script src="<?php echo base_url(); ?>assets/js/maskmoney.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
+<script src="<?= base_url() ?>assets/js/maskmoney.js"></script>
 <script type="text/javascript">
     $(document).ready(function() {
         $(".money").maskMoney();
         $("#cliente").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/os/autoCompleteCliente",
+            source: "<?= base_url() ?>index.php/os/autoCompleteCliente",
             minLength: 2,
             select: function(event, ui) {
                 $("#clienteHide").val(ui.item.id);
             }
         });
         $("#tecnico").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/os/autoCompleteUsuario",
+            source: "<?= base_url() ?>index.php/os/autoCompleteUsuario",
             minLength: 2,
             select: function(event, ui) {
                 $("#responsavelHide").val(ui.item.id);
diff --git a/application/views/servicos/adicionarServico.php b/application/views/servicos/adicionarServico.php
index 569e62673..4b91ba4a9 100644
--- a/application/views/servicos/adicionarServico.php
+++ b/application/views/servicos/adicionarServico.php
@@ -8,24 +8,24 @@
                 <h5>Cadastro de Serviço</h5>
             </div>
             <div class="widget-content nopadding tab-content">
-                <?php echo $custom_error; ?>
-                <form action="<?php echo current_url(); ?>" id="formServico" method="post" class="form-horizontal">
+                <?= $custom_error ?>
+                <form action="<?= current_url() ?>" id="formServico" method="post" class="form-horizontal">
                     <div class="control-group">
                         <label for="nome" class="control-label">Nome<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="nome" type="text" name="nome" value="<?php echo set_value('nome'); ?>" />
+                            <input id="nome" type="text" name="nome" value="<?= set_value('nome') ?>" />
                         </div>
                     </div>
                     <div class="control-group">
                         <label for="preco" class="control-label"><span class="required">Preço*</span></label>
                         <div class="controls">
-                            <input id="preco" class="money" data-affixes-stay="true" data-thousands="" data-decimal="." type="text" name="preco" value="<?php echo set_value('preco'); ?>" />
+                            <input id="preco" class="money" data-affixes-stay="true" data-thousands="" data-decimal="." type="text" name="preco" value="<?= set_value('preco') ?>" />
                         </div>
                     </div>
                     <div class="control-group">
                         <label for="descricao" class="control-label">Descrição</label>
                         <div class="controls">
-                            <input id="descricao" type="text" name="descricao" value="<?php echo set_value('descricao'); ?>" />
+                            <input id="descricao" type="text" name="descricao" value="<?= set_value('descricao') ?>" />
                         </div>
                     </div>
                     <div class="form-actions">
@@ -33,7 +33,7 @@
                             <div class="span6 offset3" style="display:flex;justify-content: center">
                                 <button type="submit" class="button btn btn-mini btn-success" style="max-width: 160px">
                                   <span class="button__icon"><i class='bx bx-plus-circle'></i></span><span class="button__text2">Adicionar</span></a></button>
-                                <a href="<?php echo base_url() ?>index.php/servicos" id="btnAdicionar" class="button btn btn-mini btn-warning" style="max-width: 160px">
+                                <a href="<?= base_url() ?>index.php/servicos" id="btnAdicionar" class="button btn btn-mini btn-warning" style="max-width: 160px">
                                   <span class="button__icon"><i class="bx bx-undo"></i></span><span class="button__text2">Voltar</span></a>
                             </div>
                         </div>
@@ -43,8 +43,8 @@
         </div>
     </div>
 </div>
-<script src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
-<script src="<?php echo base_url(); ?>assets/js/maskmoney.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
+<script src="<?= base_url() ?>assets/js/maskmoney.js"></script>
 <script type="text/javascript">
     $(document).ready(function() {
         $(".money").maskMoney();
diff --git a/application/views/servicos/editarServico.php b/application/views/servicos/editarServico.php
index 25ac1ed21..35c8f9e3d 100644
--- a/application/views/servicos/editarServico.php
+++ b/application/views/servicos/editarServico.php
@@ -8,32 +8,32 @@
                 <h5>Editar Serviço</h5>
             </div>
             <div class="widget-content nopadding tab-content">
-                <?php echo $custom_error; ?>
-                <form action="<?php echo current_url(); ?>" id="formServico" method="post" class="form-horizontal">
-                    <?php echo form_hidden('idServicos', $result->idServicos) ?>
+                <?= $custom_error ?>
+                <form action="<?= current_url() ?>" id="formServico" method="post" class="form-horizontal">
+                    <?= form_hidden('idServicos', $result->idServicos) ?>
                     <div class="control-group">
                         <label for="nome" class="control-label">Nome<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="nome" type="text" name="nome" value="<?php echo $result->nome ?>" />
+                            <input id="nome" type="text" name="nome" value="<?= esc($result->nome) ?>" />
                         </div>
                     </div>
                     <div class="control-group">
                         <label for="preco" class="control-label"><span class="required">Preço*</span></label>
                         <div class="controls">
-                            <input id="preco" class="money" data-affixes-stay="true" data-thousands="" data-decimal="." type="text" name="preco" value="<?php echo $result->preco ?>" />
+                            <input id="preco" class="money" data-affixes-stay="true" data-thousands="" data-decimal="." type="text" name="preco" value="<?= esc($result->preco) ?>" />
                         </div>
                     </div>
                     <div class="control-group">
                         <label for="descricao" class="control-label">Descrição</label>
                         <div class="controls">
-                            <input id="descricao" type="text" name="descricao" value="<?php echo $result->descricao ?>" />
+                            <input id="descricao" type="text" name="descricao" value="<?= esc($result->descricao) ?>" />
                         </div>
                     </div>
                     <div class="form-actions">
                         <div class="span12">
                             <div class="span6 offset3" style="display:flex;justify-content: center">
                                 <button type="submit" class="button btn btn-primary" style="max-width: 160px"><span class="button__icon"><i class="bx bx-sync"></i></span><span class="button__text2">Atualizar</span></button>
-                                <a href="<?php echo base_url() ?>index.php/servicos" id="btnAdicionar" class="button btn btn-mini btn-warning" style="max-width: 160px">
+                                <a href="<?= base_url() ?>index.php/servicos" id="btnAdicionar" class="button btn btn-mini btn-warning" style="max-width: 160px">
                                   <span class="button__icon"><i class="bx bx-undo"></i></span><span class="button__text2">Voltar</span></a>
                             </div>
                         </div>
@@ -43,8 +43,8 @@
         </div>
     </div>
 </div>
-<script src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
-<script src="<?php echo base_url(); ?>assets/js/maskmoney.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
+<script src="<?= base_url() ?>assets/js/maskmoney.js"></script>
 <script type="text/javascript">
     $(document).ready(function() {
         $(".money").maskMoney();
diff --git a/application/views/servicos/servicos.php b/application/views/servicos/servicos.php
index b1e4224e2..5b1fae40a 100644
--- a/application/views/servicos/servicos.php
+++ b/application/views/servicos/servicos.php
@@ -20,7 +20,7 @@
         <?php endif; ?>
         <form class="span9" method="get" action="<?= base_url() ?>index.php/servicos" style="display: flex; justify-content: flex-end;">
             <div class="span3">
-                <input type="text" name="pesquisa" id="pesquisa" placeholder="Buscar por Nome ou Descrição..." class="span12" value="<?=html_escape($this->input->get('pesquisa'))?>">
+                <input type="text" name="pesquisa" id="pesquisa" placeholder="Buscar por Nome ou Descrição..." class="span12" value="<?= html_escape($this->input->get('pesquisa')) ?>">
             </div>
             <div class="span1">
                 <button class="button btn btn-mini btn-warning" style="min-width: 30px">
@@ -69,11 +69,11 @@
         </div>
     </div>
 </div>
-<?php echo $this->pagination->create_links(); ?>
+<?= $this->pagination->create_links() ?>
 
 <!-- Modal -->
 <div id="modal-excluir" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form action="<?php echo base_url() ?>index.php/servicos/excluir" method="post">
+    <form action="<?= base_url() ?>index.php/servicos/excluir" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h5 id="myModalLabel">Excluir Serviço</h5>
diff --git a/application/views/tema/conteudo.php b/application/views/tema/conteudo.php
index 4aa4cef09..8237d41bc 100644
--- a/application/views/tema/conteudo.php
+++ b/application/views/tema/conteudo.php
@@ -19,8 +19,12 @@
     <div class="container-flu">
       <div class="row-fluid">
         <div class="span12">
-          <?php if ($var = $this->session->flashdata('success')): ?><script>swal("Sucesso!", "<?php echo str_replace('"', '', $var); ?>", "success");</script><?php endif; ?>
-          <?php if ($var = $this->session->flashdata('error')): ?><script>swal("Falha!", "<?php echo str_replace('"', '', $var); ?>", "error");</script><?php endif; ?>
+          <?php if ($var = $this->session->flashdata('success')): ?>
+              <script>swal('Sucesso!', <?= esc_msg($var) ?>, 'success');</script>
+          <?php endif; ?>
+          <?php if ($var = $this->session->flashdata('error')): ?>
+              <script>swal('Falha!', <?= esc_msg($var) ?>, 'error');</script>
+          <?php endif; ?>
           <?php if (isset($view)) {
               echo $this->load->view($view, null, true);
           } ?>
diff --git a/application/views/tema/menu.php b/application/views/tema/menu.php
index 72be85077..c66b4a433 100644
--- a/application/views/tema/menu.php
+++ b/application/views/tema/menu.php
@@ -2,7 +2,7 @@
 <nav id="sidebar">
     <div id="newlog">
         <div class="icon2">
-            <img src="<?php echo base_url() ?>assets/img/logo-two.png">
+            <img src="<?= base_url() ?>assets/img/logo-two.png">
         </div>
         <div class="title1">
             <?= $configuration['app_theme'] == 'white' ||  $configuration['app_theme'] == 'whitegreen' ? '<img src="' . base_url() . 'assets/img/logo-mapos.png">' : '<img src="' . base_url() . 'assets/img/logo-mapos-branco.png">'; ?>
diff --git a/application/views/tema/rodape.php b/application/views/tema/rodape.php
index d4858c457..d04de7e43 100644
--- a/application/views/tema/rodape.php
+++ b/application/views/tema/rodape.php
@@ -1,7 +1,7 @@
 <div class="row-fluid">
     <div id="footer" class="span12">
         <a class="pecolor" href="https://github.com/RamonSilva20/mapos" target="_blank">
-            <?= date('Y') ?> &copy; Ramon Silva - Map-OS - Versão: <?= $this->config->item('app_version') ?>
+            <?= date('Y') ?> &copy; Ramon Silva - Map-OS - Versão: <?= esc($this->config->item('app_version')) ?>
         </a>
     </div>
 </div>
@@ -11,10 +11,10 @@
 </body>
 <script type="text/javascript">
     $(document).ready(function() {
-        var dataTableEnabled = '<?= $configuration['control_datatable'] ?>';
+        var dataTableEnabled = <?= esc_js($configuration['control_datatable']) ?>;
         if(dataTableEnabled == '1') {
             $('#tabela').dataTable( {
-                "pageLength": <?= $configuration['per_page'] ?>,
+                "pageLength": <?= (int) $configuration['per_page'] ?>,
                 "ordering": false,
                 "info": false,
                 "language": {
diff --git a/application/views/tema/topo.php b/application/views/tema/topo.php
index 79b8f2250..8ff2eca8d 100644
--- a/application/views/tema/topo.php
+++ b/application/views/tema/topo.php
@@ -2,7 +2,7 @@
 <html lang="pt-br">
 
 <head>
-  <title><?= $configuration['app_name'] ?: 'Map-OS' ?></title>
+  <title><?= esc($configuration['app_name'] ?: 'Map-OS') ?></title>
   <meta charset="UTF-8" />
   <meta name="viewport" content="width=device-width, initial-scale=1.0" />
   <meta name="csrf-token-name" content="<?= config_item("csrf_token_name") ?>">
@@ -135,7 +135,7 @@ function saudacao()
   echo saudacao($login); // Irá retornar conforme o horário
   ?>
       </div>
-      <div class="userT"><?= $this->session->userdata('nome_admin') ?></div>
+      <div class="userT"><?= esc($this->session->userdata('nome_admin')) ?></div>
 
       <section class="sec_profile">
         <div class="profile">
diff --git a/application/views/usuarios/adicionarUsuario.php b/application/views/usuarios/adicionarUsuario.php
index fc0c0ad70..3c2f319fa 100644
--- a/application/views/usuarios/adicionarUsuario.php
+++ b/application/views/usuarios/adicionarUsuario.php
@@ -1,6 +1,6 @@
-<script src="<?php echo base_url() ?>assets/js/jquery.mask.min.js"></script>
-<script src="<?php echo base_url() ?>assets/js/sweetalert2.all.min.js"></script>
-<script src="<?php echo base_url() ?>assets/js/funcoes.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.mask.min.js"></script>
+<script src="<?= base_url() ?>assets/js/sweetalert2.all.min.js"></script>
+<script src="<?= base_url() ?>assets/js/funcoes.js"></script>
 
 <div class="row-fluid" style="margin-top:0">
     <div class="span12">
@@ -15,39 +15,39 @@
                 <?php if ($custom_error != '') {
                     echo '<div class="alert alert-danger">' . $custom_error . '</div>';
                 } ?>
-                <form action="<?php echo current_url(); ?>" id="formUsuario" method="post" class="form-horizontal">
+                <form action="<?= current_url() ?>" id="formUsuario" method="post" class="form-horizontal">
                     <div class="control-group">
                         <label for="nome" class="control-label">Nome<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="nome" type="text" name="nome" value="<?php echo set_value('nome'); ?>" />
+                            <input id="nome" type="text" name="nome" value="<?= set_value('nome') ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="rg" class="control-label">RG<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="rg" type="text" name="rg" value="<?php echo set_value('rg'); ?>" />
+                            <input id="rg" type="text" name="rg" value="<?= set_value('rg') ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="cpf" class="control-label">CPF<span class="required">*</span></label>
                         <div class="controls">
-                            <input class="" type="text" id="cpfUser" name="cpf" value="<?php echo set_value('cpf'); ?>" />
+                            <input class="" type="text" id="cpfUser" name="cpf" value="<?= set_value('cpf') ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="telefone" class="control-label">Telefone<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="telefone" type="text" name="telefone" value="<?php echo set_value('telefone'); ?>" />
+                            <input id="telefone" type="text" name="telefone" value="<?= set_value('telefone') ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="celular" class="control-label">Celular</label>
                         <div class="controls">
-                            <input id="celular" type="text" name="celular" value="<?php echo set_value('celular'); ?>" />
+                            <input id="celular" type="text" name="celular" value="<?= set_value('celular') ?>" />
                         </div>
                     </div>
 
@@ -55,56 +55,56 @@
                     <div class="control-group">
                         <label for="email" class="control-label">Email<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="email" type="text" name="email" value="<?php echo set_value('email'); ?>" />
+                            <input id="email" type="text" name="email" value="<?= set_value('email') ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="senha" class="control-label">Senha<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="senha" type="password" name="senha" value="<?php echo set_value('senha'); ?>" />
+                            <input id="senha" type="password" name="senha" value="<?= set_value('senha') ?>" />
                         </div>
                     </div>
 
                     <div class="control-group" class="control-label">
                         <label for="cep" class="control-label">CEP<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="cep" type="text" name="cep" value="<?php echo set_value('cep'); ?>" />
+                            <input id="cep" type="text" name="cep" value="<?= set_value('cep') ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="rua" class="control-label">Rua<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="rua" type="text" name="rua" value="<?php echo set_value('rua'); ?>" />
+                            <input id="rua" type="text" name="rua" value="<?= set_value('rua') ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="numero" class="control-label">Numero<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="numero" type="text" name="numero" value="<?php echo set_value('numero'); ?>" />
+                            <input id="numero" type="text" name="numero" value="<?= set_value('numero') ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="bairro" class="control-label">Bairro<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="bairro" type="text" name="bairro" value="<?php echo set_value('bairro'); ?>" />
+                            <input id="bairro" type="text" name="bairro" value="<?= set_value('bairro') ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="cidade" class="control-label">Cidade<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="cidade" type="text" name="cidade" value="<?php echo set_value('cidade'); ?>" />
+                            <input id="cidade" type="text" name="cidade" value="<?= set_value('cidade') ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="estado" class="control-label">Estado<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="estado" type="text" name="estado" value="<?php echo set_value('estado'); ?>" />
+                            <input id="estado" type="text" name="estado" value="<?= set_value('estado') ?>" />
                         </div>
                     </div>
 
@@ -113,7 +113,7 @@
                     <div class="control-group">
                         <label for="dataExpiracao" class="control-label">Expira em <span class="required">*</span></label>
                         <div class="controls">
-                            <input id="dataExpiracao" type="date" name="dataExpiracao" value="<?php echo set_value('dataExpiracao'); ?>" />
+                            <input id="dataExpiracao" type="date" name="dataExpiracao" value="<?= set_value('dataExpiracao') ?>" />
                         </div>
                     </div>
 
@@ -143,7 +143,7 @@
                             <div class="span6 offset3" style="display:flex">
                                 <button type="submit" class="button btn btn-success">
                                   <span class="button__icon"><i class='bx bx-plus-circle'></i></span><span class="button__text2">Adicionar</span></button>
-                                <a href="<?php echo base_url() ?>index.php/usuarios" id="" class="button btn btn-mini btn-warning">
+                                <a href="<?= base_url() ?>index.php/usuarios" id="" class="button btn btn-mini btn-warning">
                                   <span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
                             </div>
                         </div>
@@ -157,7 +157,7 @@
 </div>
 
 
-<script src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
 <script type="text/javascript">
     $(document).ready(function() {
 
diff --git a/application/views/usuarios/editarUsuario.php b/application/views/usuarios/editarUsuario.php
index cd95af298..4af57d3cd 100644
--- a/application/views/usuarios/editarUsuario.php
+++ b/application/views/usuarios/editarUsuario.php
@@ -1,6 +1,6 @@
-<script src="<?php echo base_url() ?>assets/js/jquery.mask.min.js"></script>
-<script src="<?php echo base_url() ?>assets/js/sweetalert2.all.min.js"></script>
-<script src="<?php echo base_url() ?>assets/js/funcoes.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.mask.min.js"></script>
+<script src="<?= base_url() ?>assets/js/sweetalert2.all.min.js"></script>
+<script src="<?= base_url() ?>assets/js/funcoes.js"></script>
 
 <div class="row-fluid" style="margin-top:0">
     <div class="span12">
@@ -15,46 +15,46 @@
                 <?php if ($custom_error != '') {
                     echo '<div class="alert alert-danger">' . $custom_error . '</div>';
                 } ?>
-                <form action="<?php echo current_url(); ?>" id="formUsuario" method="post" class="form-horizontal">
+                <form action="<?= current_url() ?>" id="formUsuario" method="post" class="form-horizontal">
                     <div class="control-group">
-                        <?php echo form_hidden('idUsuarios', $result->idUsuarios) ?>
+                        <?= form_hidden('idUsuarios', $result->idUsuarios) ?>
                         <label for="nome" class="control-label">Nome<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="nome" type="text" name="nome" value="<?php echo $result->nome; ?>" />
+                            <input id="nome" type="text" name="nome" value="<?= esc($result->nome) ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="rg" class="control-label">RG<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="rg" type="text" name="rg" value="<?php echo $result->rg; ?>" />
+                            <input id="rg" type="text" name="rg" value="<?= esc($result->rg) ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="cpf" class="control-label">CPF<span class="required">*</span></label>
                         <div class="controls">
-                            <input class="cpfUser" type="text" name="cpf" value="<?php echo $result->cpf; ?>"/>
+                            <input class="cpfUser" type="text" name="cpf" value="<?= esc($result->cpf) ?>"/>
                         </div>
                     </div>
                     <div class="control-group">
                         <label for="telefone" class="control-label">Telefone<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="telefone" type="text" name="telefone" value="<?php echo $result->telefone; ?>" />
+                            <input id="telefone" type="text" name="telefone" value="<?= esc($result->telefone) ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="celular" class="control-label">Celular</label>
                         <div class="controls">
-                            <input id="celular" type="text" name="celular" value="<?php echo $result->celular; ?>" />
+                            <input id="celular" type="text" name="celular" value="<?= esc($result->celular) ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="email" class="control-label">Email<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="email" type="text" name="email" value="<?php echo $result->email; ?>" />
+                            <input id="email" type="text" name="email" value="<?= esc($result->email) ?>" />
                         </div>
                     </div>
 
@@ -69,42 +69,42 @@
                     <div class="control-group" class="control-label">
                         <label for="cep" class="control-label">CEP<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="cep" type="text" name="cep" value="<?php echo $result->cep; ?>" />
+                            <input id="cep" type="text" name="cep" value="<?= esc($result->cep) ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="rua" class="control-label">Rua<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="rua" type="text" name="rua" value="<?php echo $result->rua; ?>" />
+                            <input id="rua" type="text" name="rua" value="<?= esc($result->rua) ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="numero" class="control-label">Numero<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="numero" type="text" name="numero" value="<?php echo $result->numero; ?>" />
+                            <input id="numero" type="text" name="numero" value="<?= esc($result->numero) ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="bairro" class="control-label">Bairro<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="bairro" type="text" name="bairro" value="<?php echo $result->bairro; ?>" />
+                            <input id="bairro" type="text" name="bairro" value="<?= esc($result->bairro) ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="cidade" class="control-label">Cidade<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="cidade" type="text" name="cidade" value="<?php echo $result->cidade; ?>" />
+                            <input id="cidade" type="text" name="cidade" value="<?= esc($result->cidade) ?>" />
                         </div>
                     </div>
 
                     <div class="control-group">
                         <label for="estado" class="control-label">Estado<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="estado" type="text" name="estado" value="<?php echo $result->estado; ?>" />
+                            <input id="estado" type="text" name="estado" value="<?= esc($result->estado) ?>" />
                         </div>
                     </div>
 
@@ -112,7 +112,7 @@
                     <div class="control-group">
                         <label for="dataExpiracao" class="control-label">Expira em<span class="required">*</span></label>
                         <div class="controls">
-                            <input id="dataExpiracao" type="date" name="dataExpiracao" value="<?php echo $result->dataExpiracao; ?>" />
+                            <input id="dataExpiracao" type="date" name="dataExpiracao" value="<?= esc($result->dataExpiracao) ?>" />
                         </div>
                     </div>
 
@@ -128,8 +128,8 @@
                                     $ativo = '';
                                     $inativo = 'selected';
                                 } ?>
-                                <option value="1" <?php echo $ativo; ?>>Ativo</option>
-                                <option value="0" <?php echo $inativo; ?>>Inativo</option>
+                                <option value="1" <?= esc($ativo) ?>>Ativo</option>
+                                <option value="0" <?= esc($inativo) ?>>Inativo</option>
                             </select>
                         </div>
                     </div>
@@ -156,7 +156,7 @@
                             <div class="span6 offset3" style="display:flex">
                                 <button type="submit" class="button btn btn-primary">
                                   <span class="button__icon"><i class="bx bx-sync"></i></span><span class="button__text2">Atualizar</span></button>
-                                <a href="<?php echo base_url() ?>index.php/usuarios" id="" class="button btn btn-mini btn-warning">
+                                <a href="<?= base_url() ?>index.php/usuarios" id="" class="button btn btn-mini btn-warning">
                                   <span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text">Voltar</span></a>
                             </div>
                         </div>
@@ -168,7 +168,7 @@
     </div>
 </div>
 
-<script src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
+<script src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
 <script type="text/javascript">
     $(document).ready(function() {
 
diff --git a/application/views/usuarios/usuarios.php b/application/views/usuarios/usuarios.php
index af438c8bc..1d999f222 100644
--- a/application/views/usuarios/usuarios.php
+++ b/application/views/usuarios/usuarios.php
@@ -49,17 +49,17 @@
                     <?php else: ?>
                         <?php foreach ($results as $r): ?>
                             <tr>
-                                <td><?= $r->idUsuarios ?></td>
-                                <td><?= $r->nome ?></td>
-                                <td><?= $r->cpf ?></td>
-                                <td><?= $r->telefone ?></td>
-                                <td><?= $r->permissao ?></td>
+                                <td><?= esc($r->idUsuarios) ?></td>
+                                <td><?= esc($r->nome) ?></td>
+                                <td><?= esc($r->cpf) ?></td>
+                                <td><?= esc($r->telefone) ?></td>
+                                <td><?= esc($r->permissao) ?></td>
                                 <?php
                                 $situacao = ($r->situacao == 1) ? 'Ativo' : 'Inativo';
                             $situacaoClasse = ($r->situacao == 1) ? 'situacao-ativo' : 'situacao-inativo';
                             ?>
-                                <td><span class="badge <?= $situacaoClasse ?>"><?= ucfirst($situacao) ?></span></td>
-                                <td><?= $r->dataExpiracao ?></td>
+                                <td><span class="badge <?= esc($situacaoClasse) ?>"><?= ucfirst($situacao) ?></span></td>
+                                <td><?= esc($r->dataExpiracao) ?></td>
                                 <td>
                                     <a href="<?= base_url('index.php/usuarios/editar/' . $r->idUsuarios) ?>" class="btn-nwe3" title="Editar OS"><i class="bx bx-edit"></i></a>
                                 </td>
diff --git a/application/views/vendas/adicionarVenda.php b/application/views/vendas/adicionarVenda.php
index e90556e4e..96460ac14 100644
--- a/application/views/vendas/adicionarVenda.php
+++ b/application/views/vendas/adicionarVenda.php
@@ -1,11 +1,11 @@
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
-<link rel="stylesheet" href="<?php echo base_url() ?>assets/trumbowyg/ui/trumbowyg.css">
-<script type="text/javascript" src="<?php echo base_url() ?>assets/trumbowyg/trumbowyg.js"></script>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/trumbowyg/langs/pt_br.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/trumbowyg/ui/trumbowyg.css">
+<script type="text/javascript" src="<?= base_url() ?>assets/trumbowyg/trumbowyg.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/trumbowyg/langs/pt_br.js"></script>
 
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/custom.css" />
+<link rel="stylesheet" href="<?= base_url() ?>assets/css/custom.css" />
 
 <div class="row-fluid" style="margin-top:0">
     <div class="span12">
@@ -27,18 +27,18 @@
                                 <?php if ($custom_error == true) { ?>
                                     <div class="span12 alert alert-danger" id="divInfo" style="padding: 1%;">Dados incompletos, verifique os campos com asterisco ou se selecionou corretamente cliente e responsável.</div>
                                 <?php } ?>
-                                <form action="<?php echo current_url(); ?>" method="post" id="formVendas">
+                                <form action="<?= current_url() ?>" method="post" id="formVendas">
                                     <div class="span12" style="padding: 1%">
                                         <div class="span2">
                                             <label for="dataInicial">Data da Venda<span class="required">*</span></label>
-                                            <input id="dataVenda" class="span12 datepicker" type="text" name="dataVenda" value="<?php echo date('d/m/Y'); ?>" />
+                                            <input id="dataVenda" class="span12 datepicker" type="text" name="dataVenda" value="<?= date('d/m/Y') ?>" />
                                         </div>
                                         <div class="span3">
                                             <label for="cliente">Cliente<span class="required">*</span></label>
                                             <input id="cliente" class="span12" type="text" name="cliente" value="" />
                                             <input id="clientes_id" class="span12" type="hidden" name="clientes_id" value="" />
                                             <div class="addclient"><?php if ($this->permission->checkPermission($this->session->userdata('permissao'), 'aCliente')) { ?>
-                                              <a href="<?php echo base_url(); ?>index.php/clientes/adicionar" class="btn btn-success"><i class="fas fa-plus"></i> Adicionar Cliente</a><?php } ?></div>
+                                              <a href="<?= base_url() ?>index.php/clientes/adicionar" class="btn btn-success"><i class="fas fa-plus"></i> Adicionar Cliente</a><?php } ?></div>
                                         </div>
                                         <div class="span3">
                                             <label for="tecnico">Vendedor<span class="required">*</span></label>
@@ -61,7 +61,7 @@
                                         <div class="span2">
                                             <label for="garantia">Garantia (dias)</label>
                                             <input id="garantia" type="number" placeholder="Em Dias" min="0" max="9999" class="span12" name="garantia" value="" />
-                                            <?php echo form_error('garantia'); ?>
+                                            <?= form_error('garantia') ?>
                                         </div>
 
                                     <div class="span6" style="padding: 1%; margin-left: 0">
@@ -81,7 +81,7 @@
                                     <div class="span12" style="padding: 1%; margin-left: 0">
                                         <div class="span6 offset3" style="display:flex;justify-content: center">
                                           <button class="button btn btn-success" id="btnContinuar"><span class="button__icon"><i class='bx bx-chevrons-right'></i></span><span class="button__text2">Continuar</span></button>
-                                            <a href="<?php echo base_url() ?>index.php/vendas" class="button btn btn-mini btn-warning"><span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
+                                            <a href="<?= base_url() ?>index.php/vendas" class="button btn btn-mini btn-warning"><span class="button__icon"><i class="bx bx-undo"></i></span> <span class="button__text2">Voltar</span></a>
                                         </div>
                                     </div>
                                 </form>
@@ -97,7 +97,7 @@
     $(document).ready(function() {
         $('.addclient').hide();
         $("#cliente").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/vendas/autoCompleteCliente",
+            source: "<?= base_url() ?>index.php/vendas/autoCompleteCliente",
             minLength: 1,
             close: function(ui) { if(ui.label == 'Adicionar cliente...')ui.target.value = '';},
             select: function(event, ui) {
@@ -111,7 +111,7 @@
             }
         });
         $("#tecnico").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/vendas/autoCompleteUsuario",
+            source: "<?= base_url() ?>index.php/vendas/autoCompleteUsuario",
             minLength: 1,
             select: function(event, ui) {
                 $("#usuarios_id").val(ui.item.id);
diff --git a/application/views/vendas/editarVenda.php b/application/views/vendas/editarVenda.php
index 03c8e8e5c..eeebe39cb 100644
--- a/application/views/vendas/editarVenda.php
+++ b/application/views/vendas/editarVenda.php
@@ -1,12 +1,12 @@
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/js/jquery.validate.js"></script>
-<script src="<?php echo base_url() ?>assets/js/sweetalert2.all.min.js"></script>
-<link rel="stylesheet" href="<?php echo base_url() ?>assets/trumbowyg/ui/trumbowyg.css">
-<script type="text/javascript" src="<?php echo base_url() ?>assets/trumbowyg/trumbowyg.js"></script>
-<script type="text/javascript" src="<?php echo base_url() ?>assets/trumbowyg/langs/pt_br.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/js/jquery-ui/css/smoothness/jquery-ui-1.9.2.custom.css" />
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-ui/js/jquery-ui-1.9.2.custom.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/js/jquery.validate.js"></script>
+<script src="<?= base_url() ?>assets/js/sweetalert2.all.min.js"></script>
+<link rel="stylesheet" href="<?= base_url() ?>assets/trumbowyg/ui/trumbowyg.css">
+<script type="text/javascript" src="<?= base_url() ?>assets/trumbowyg/trumbowyg.js"></script>
+<script type="text/javascript" src="<?= base_url() ?>assets/trumbowyg/langs/pt_br.js"></script>
 
-<link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/custom.css" />
+<link rel="stylesheet" href="<?= base_url() ?>assets/css/custom.css" />
 
 <div class="row-fluid" style="margin-top:0">
     <div class="span12">
@@ -26,26 +26,26 @@
                     <div class="tab-content">
                         <div class="tab-pane active" id="tab1">
                             <div class="span12" id="divEditarVenda">
-                                <form action="<?php echo current_url(); ?>" method="post" id="formVendas">
-                                    <?php echo form_hidden('idVendas', $result->idVendas) ?>
+                                <form action="<?= current_url() ?>" method="post" id="formVendas">
+                                    <?= form_hidden('idVendas', $result->idVendas) ?>
                                     <div class="span12" style="padding: 1%; margin-left: 0">
                                         <h3>Venda:
-                                            <?php echo $result->idVendas ?>
+                                            <?= esc($result->idVendas) ?>
                                         </h3>
                                         <div class="span2" style="margin-left: 0">
                                             <label for="dataFinal">Data Final</label>
-                                            <input id="dataVenda" class="span12 datepicker" type="text" name="dataVenda" value="<?php echo date('d/m/Y', strtotime($result->dataVenda)); ?>" />
+                                            <input id="dataVenda" class="span12 datepicker" type="text" name="dataVenda" value="<?= date('d/m/Y', strtotime($result->dataVenda)) ?>" />
                                         </div>
                                         <div class="span3">
                                             <label for="cliente">Cliente<span class="required">*</span></label>
-                                            <input id="cliente" class="span12" type="text" name="cliente" value="<?php echo $result->nomeCliente ?>" />
-                                            <input id="clientes_id" class="span12" type="hidden" name="clientes_id" value="<?php echo $result->clientes_id ?>" />
+                                            <input id="cliente" class="span12" type="text" name="cliente" value="<?= esc($result->nomeCliente) ?>" />
+                                            <input id="clientes_id" class="span12" type="hidden" name="clientes_id" value="<?= esc($result->clientes_id) ?>" />
                                             <input id="valorTotal" type="hidden" name="valorTotal" value="" />
                                         </div>
                                         <div class="span3">
                                             <label for="tecnico">Vendedor<span class="required">*</span></label>
-                                            <input id="tecnico" class="span12" type="text" name="tecnico" value="<?php echo $result->nome ?>" />
-                                            <input id="usuarios_id" class="span12" type="hidden" name="usuarios_id" value="<?php echo $result->usuarios_id ?>" />
+                                            <input id="tecnico" class="span12" type="text" name="tecnico" value="<?= esc($result->nome) ?>" />
+                                            <input id="usuarios_id" class="span12" type="hidden" name="usuarios_id" value="<?= esc($result->usuarios_id) ?>" />
                                         </div>
                                         <div class="span2">
                                             <label for="status">Status<span class="required">*</span></label>
@@ -65,8 +65,8 @@
                                             <label for="garantia">Garantia (dias)</label>
                                             <input id="garantia" type="number" placeholder="Em dias" min="0" max="9999"
                                                 class="span12" name="garantia"
-                                                value="<?php echo $result->garantia ?>" />
-                                            <?php echo form_error('garantia'); ?>
+                                                value="<?= esc($result->garantia) ?>" />
+                                            <?= form_error('garantia') ?>
                                         </div>
                                     </div>
 
@@ -74,14 +74,14 @@ class="span12" name="garantia"
                                         <label for="observacoes">
                                             <h4>Observações Internas</h4>
                                         </label>
-                                        <textarea class="editor" name="observacoes" id="observacoes" cols="30" rows="5"><?php echo $result->observacoes ?></textarea>
+                                        <textarea class="editor" name="observacoes" id="observacoes" cols="30" rows="5"><?= esc($result->observacoes) ?></textarea>
                                     </div>
 
                                     <div class="span6" style="padding: 1%; margin-left: 0">
                                         <label for="observacoes_cliente">
                                             <h4>Observações ao Cliente</h4>
                                         </label>
-                                        <textarea class="editor" name="observacoes_cliente" id="observacoes_cliente" cols="30" rows="5"><?php echo $result->observacoes_cliente ?></textarea>
+                                        <textarea class="editor" name="observacoes_cliente" id="observacoes_cliente" cols="30" rows="5"><?= esc($result->observacoes_cliente) ?></textarea>
                                     </div>
 
                                     <div class="span12" style="padding: 1%; margin-left: 0">
@@ -96,11 +96,11 @@ class="span12" name="garantia"
                                                 <span class="button__icon"><i class="bx bx-sync"></i></span>
                                                 <span class="button__text2">Atualizar</span>
                                             </button>
-                                            <a href="<?php echo base_url() ?>index.php/vendas/visualizar/<?php echo $result->idVendas; ?>" class="button btn btn-primary">
+                                            <a href="<?= base_url() ?>index.php/vendas/visualizar/<?= esc($result->idVendas) ?>" class="button btn btn-primary">
                                                 <span class="button__icon"><i class="bx bx-show"></i></span>
                                                 <span class="button__text2">Visualizar</span>
                                             </a>
-                                            <a href="<?php echo base_url() ?>index.php/vendas" class="button btn btn-warning">
+                                            <a href="<?= base_url() ?>index.php/vendas" class="button btn btn-warning">
                                                 <span class="button__icon"><i class="bx bx-undo"></i></span>
                                                 <span class="button__text2">Voltar</span>
                                             </a>
@@ -112,10 +112,10 @@ class="span12" name="garantia"
                         <div class="tab-pane" id="tab2">
                             <div class="span12 well" style="padding: 1%; margin-left: 0">
                                 <div class="span11">
-                                    <form id="formProdutos" action="<?php echo base_url(); ?>index.php/vendas/adicionarProduto" method="post">
+                                    <form id="formProdutos" action="<?= base_url() ?>index.php/vendas/adicionarProduto" method="post">
                                         <div class="span6">
                                             <input type="hidden" name="idProduto" id="idProduto" />
-                                            <input type="hidden" name="idVendasProduto" id="idVendasProduto" value="<?php echo $result->idVendas ?>" />
+                                            <input type="hidden" name="idVendasProduto" id="idVendasProduto" value="<?= esc($result->idVendas) ?>" />
                                             <input type="hidden" name="estoque" id="estoque" value="" />
                                             <label for="">Produto</label>
                                             <input type="text" class="span12" name="produto" id="produto" placeholder="Digite o nome do produto" />
@@ -136,9 +136,9 @@ class="span12" name="garantia"
                                     </form>
                                 </div>
                                 <div class="span11">
-                                    <form id="formDesconto" action="<?php echo base_url(); ?>index.php/vendas/adicionarDesconto" method="POST">
+                                    <form id="formDesconto" action="<?= base_url() ?>index.php/vendas/adicionarDesconto" method="POST">
                                         <div class="span1">
-                                            <input type="hidden" name="idVendas" id="idVendas" value="<?php echo $result->idVendas; ?>" />
+                                            <input type="hidden" name="idVendas" id="idVendas" value="<?= esc($result->idVendas) ?>" />
                                             <label for="">Desconto</label>
                                             <input style="width: 4em;" id="desconto" name="desconto" type="text" placeholder="0.00" maxlength="6" size="2" /><br />
                                             <strong><span style="color: red" id="errorAlert"></span></strong>
@@ -147,7 +147,7 @@ class="span12" name="garantia"
                                         <label for="">Tipo Desc.</label>
                                         <select style="width: 4em;" name="tipoDesconto" id="tipoDesconto">
                                             <option value="real">R$</option>
-                                            <option value="porcento" <?=$result->tipo_desconto == "porcento" ? "selected" : "" ?>>%</option>
+                                            <option value="porcento" <?= $result->tipo_desconto == "porcento" ? "selected" : "" ?>>%</option>
                                         </select>
                                         <strong><span style="color: red" id="errorAlert"></span></strong>
                                         </div>
@@ -193,7 +193,7 @@ class="span12" name="garantia"
                                         <tr>
                                             <td colspan="4" style="text-align: right"><strong>Total:</strong></td>
                                             <td>
-                                                <div align="center"><strong>R$: <?php echo number_format($total, 2, '.', ''); ?></strong></div> <input type="hidden" id="total-venda" value="<?php echo number_format($total, 2, '.', ''); ?>">
+                                                <div align="center"><strong>R$: <?= number_format($total, 2, '.', '') ?></strong></div> <input type="hidden" id="total-venda" value="<?= number_format($total, 2, '.', '') ?>">
                                             </td>
                                         </tr>
                                         <?php if ($result->valor_desconto != 0 && $result->desconto != 0) {
@@ -201,13 +201,13 @@ class="span12" name="garantia"
                                             <tr>
                                                 <td colspan="4" style="text-align: right"><strong>Desconto:</strong></td>
                                                 <td>
-                                                    <div align="center"><strong><?php echo $result->tipo_desconto == "real" ? "R$ " : ""; ?> <?php echo number_format($result->desconto, 2, '.', ''); ?> <?php echo $result->tipo_desconto == "porcento" ? " %" : ""; ?></strong></div>
+                                                    <div align="center"><strong><?= $result->tipo_desconto == "real" ? "R$ " : "" ?> <?= number_format($result->desconto, 2, '.', '') ?> <?= $result->tipo_desconto == "porcento" ? " %" : "" ?></strong></div>
                                                 </td>
                                             </tr>
                                             <tr>
                                                 <td colspan="4" style="text-align: right"><strong>Total Com Desconto:</strong></td>
                                                 <td>
-                                                    <div align="center"><strong>R$: <?php echo number_format($result->valor_desconto, 2, '.', ''); ?></strong></div><input type="hidden" id="total-desconto" value="<?php echo number_format($result->valor_desconto, 2, '.', ''); ?>">
+                                                    <div align="center"><strong>R$: <?= number_format($result->valor_desconto, 2, '.', '') ?></strong></div><input type="hidden" id="total-desconto" value="<?= number_format($result->valor_desconto, 2, '.', '') ?>">
                                                 </td>
                                             </tr>
                                         <?php
@@ -226,7 +226,7 @@ class="span12" name="garantia"
 
 <!-- Modal Faturar-->
 <div id="modal-faturar" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form id="formFaturar" action="<?php echo current_url() ?>" method="post">
+    <form id="formFaturar" action="<?= current_url() ?>" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h3 id="myModalLabel">Faturar Venda</h3>
@@ -235,25 +235,25 @@ class="span12" name="garantia"
             <div class="span12 alert alert-info" style="margin-left: 0"> Obrigatório o preenchimento dos campos com asterisco.</div>
             <div class="span12" style="margin-left: 0">
                 <label for="descricao">Descrição</label>
-                <input class="span12" id="descricao" type="text" name="descricao" value="Fatura de Venda Nº: <?php echo $result->idVendas; ?> " />
+                <input class="span12" id="descricao" type="text" name="descricao" value="Fatura de Venda Nº: <?= esc($result->idVendas) ?> " />
             </div>
             <div class="span12" style="margin-left: 0">
                 <div class="span12" style="margin-left: 0">
                     <label for="cliente">Cliente*</label>
-                    <input class="span12" id="cliente" type="text" name="cliente" value="<?php echo $result->nomeCliente ?>" />
-                    <input type="hidden" name="clientes_id" id="clientes_id" value="<?php echo $result->clientes_id ?>">
-                    <input type="hidden" name="vendas_id" id="vendas_id" value="<?php echo $result->idVendas; ?>">
+                    <input class="span12" id="cliente" type="text" name="cliente" value="<?= esc($result->nomeCliente) ?>" />
+                    <input type="hidden" name="clientes_id" id="clientes_id" value="<?= esc($result->clientes_id) ?>">
+                    <input type="hidden" name="vendas_id" id="vendas_id" value="<?= esc($result->idVendas) ?>">
                 </div>
             </div>
             <div class="span12" style="margin-left: 0">
                 <div class="span5" style="margin-left: 0">
                     <label for="valor">Valor*</label>
                     <input type="hidden" id="tipo" name="tipo" value="receita" />
-                    <input class="span12 money" id="valor" type="text" name="valor" value="<?php echo number_format($total, 2, '.', ''); ?> " />
+                    <input class="span12 money" id="valor" type="text" name="valor" value="<?= number_format($total, 2, '.', '') ?> " />
                 </div>
                 <div class="span5" style="margin-left: 2">
                     <label for="valor">Valor Com Desconto*</label>
-                    <input class="span12 money" id="faturar-desconto" type="text" name="faturar-desconto" value="<?php echo number_format($result->valor_desconto, 2, '.', ''); ?> " />
+                    <input class="span12 money" id="faturar-desconto" type="text" name="faturar-desconto" value="<?= number_format($result->valor_desconto, 2, '.', '') ?> " />
                 </div>
             </div>
             <div class="span12" style="margin-left: 0">
@@ -294,7 +294,7 @@ class="span12" name="garantia"
         </div>        
     </form>
 </div>
-<script src="<?php echo base_url(); ?>assets/js/maskmoney.js"></script>
+<script src="<?= base_url() ?>assets/js/maskmoney.js"></script>
 <script type="text/javascript">
     
     $("#quantidade").keyup(function() {
@@ -417,11 +417,11 @@ function validarDesconto(resultado, valor) {
                             title: "Sucesso",
                             text: response.messages
                         });
-                        $("#divProdutos").load("<?php echo current_url(); ?> #divProdutos");
+                        $("#divProdutos").load("<?= current_url() ?> #divProdutos");
                         $("#desconto").val("");
                         $("#resultado").val("");
                         /*setTimeout(function() {
-                            window.location.href = window.BaseUrl + 'index.php/vendas/editar/' + <?php echo $result->idVendas ?>;
+                            window.location.href = window.BaseUrl + 'index.php/vendas/editar/' + <?= esc($result->idVendas) ?>;
                         }, 2000);*/
                     } else {
                         Swal.fire({
@@ -429,7 +429,7 @@ function validarDesconto(resultado, valor) {
                             title: "Atenção",
                             text: response.messages
                         });
-                        $("#divProdutos").load("<?php echo current_url(); ?> #divProdutos");
+                        $("#divProdutos").load("<?= current_url() ?> #divProdutos");
                         $("#desconto").val("");
                         $("#resultado").val("");
                     }
@@ -441,7 +441,7 @@ function validarDesconto(resultado, valor) {
                         title: "Atenção",
                         text: response.responseJSON.messages
                     });
-                    $("#divProdutos").load("<?php echo current_url(); ?> #divProdutos");
+                    $("#divProdutos").load("<?= current_url() ?> #divProdutos");
                     $("#desconto").val("");
                     $("#resultado").val("");
                 }
@@ -491,7 +491,7 @@ function validarDesconto(resultado, valor) {
                 } else if (qtdProdutos > 0) {
                     $.ajax({
                         type: "POST",
-                        url: "<?php echo base_url(); ?>index.php/vendas/faturar",
+                        url: "<?= base_url() ?>index.php/vendas/faturar",
                         data: dados,
                         dataType: 'json',
                         success: function(data) {
@@ -513,7 +513,7 @@ function validarDesconto(resultado, valor) {
             }
         });
         $("#produto").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/os/autoCompleteProdutoSaida",
+            source: "<?= base_url() ?>index.php/os/autoCompleteProdutoSaida",
             minLength: 2,
             select: function(event, ui) {
                 $("#idProduto").val(ui.item.id);
@@ -523,14 +523,14 @@ function validarDesconto(resultado, valor) {
             }
         });
         $("#cliente").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/os/autoCompleteCliente",
+            source: "<?= base_url() ?>index.php/os/autoCompleteCliente",
             minLength: 2,
             select: function(event, ui) {
                 $("#clientes_id").val(ui.item.id);
             }
         });
         $("#tecnico").autocomplete({
-            source: "<?php echo base_url(); ?>index.php/os/autoCompleteUsuario",
+            source: "<?= base_url() ?>index.php/os/autoCompleteUsuario",
             minLength: 2,
             select: function(event, ui) {
                 $("#usuarios_id").val(ui.item.id);
@@ -605,12 +605,12 @@ function validarDesconto(resultado, valor) {
                     $("#divProdutos").html("<div class='progress progress-info progress-striped active'><div class='bar' style='width: 100%'></div></div>");
                     $.ajax({
                         type: "POST",
-                        url: "<?php echo base_url(); ?>index.php/vendas/adicionarProduto",
+                        url: "<?= base_url() ?>index.php/vendas/adicionarProduto",
                         data: dados,
                         dataType: 'json',
                         success: function(data) {
                             if (data.result == true) {
-                                $("#divProdutos").load("<?php echo current_url(); ?> #divProdutos");
+                                $("#divProdutos").load("<?= current_url() ?> #divProdutos");
                                 $("#quantidade").val('');
                                 $("#preco").val('');
                                 $("#produto").val('').focus();
@@ -622,7 +622,7 @@ function validarDesconto(resultado, valor) {
                                     title: "Atenção",
                                     html: "Ocorreu um erro ao tentar adicionar produto. <br /><br />Error: " + data.messages
                                 });
-                                $("#divProdutos").load("<?php echo current_url(); ?> #divProdutos");
+                                $("#divProdutos").load("<?= current_url() ?> #divProdutos");
                                 $('#formProdutos')[0].reset();
                             }
                         }
@@ -639,12 +639,12 @@ function validarDesconto(resultado, valor) {
                 $("#divProdutos").html("<div class='progress progress-info progress-striped active'><div class='bar' style='width: 100%'></div></div>");
                 $.ajax({
                     type: "POST",
-                    url: "<?php echo base_url(); ?>index.php/vendas/excluirProduto",
-                    data: "idProduto=" + idProduto + "&idVendas=" + <?= $result->idVendas ?> + "&quantidade=" + quantidade + "&produto=" + produto,
+                    url: "<?= base_url() ?>index.php/vendas/excluirProduto",
+                    data: "idProduto=" + idProduto + "&idVendas=" + <?= esc($result->idVendas) ?> + "&quantidade=" + quantidade + "&produto=" + produto,
                     dataType: 'json',
                     success: function(data) {
                         if (data.result == true) {
-                            $("#divProdutos").load("<?php echo current_url(); ?> #divProdutos");
+                            $("#divProdutos").load("<?= current_url() ?> #divProdutos");
                             $("#resultado").val("");
                             $("#desconto").val("");
                         } else {
@@ -653,7 +653,7 @@ function validarDesconto(resultado, valor) {
                                 title: "Atenção",
                                 html: "Ocorreu um erro ao tentar excluir produto." + data.messages
                             });
-                            $("#divProdutos").load("<?php echo current_url(); ?> #divProdutos");
+                            $("#divProdutos").load("<?= current_url() ?> #divProdutos");
                         }
                     }
                 });
diff --git a/application/views/vendas/imprimirVenda.php b/application/views/vendas/imprimirVenda.php
index f6bc72885..efe027e96 100644
--- a/application/views/vendas/imprimirVenda.php
+++ b/application/views/vendas/imprimirVenda.php
@@ -5,7 +5,7 @@
 <html lang="pt-br">
 
 <head>
-    <title><?= $this->config->item('app_name') ?> - Venda Nº#<?= $result->idVendas ?> - <?= $result->nomeCliente ?></title>
+    <title><?= esc($this->config->item('app_name')) ?> - Venda Nº#<?= esc($result->idVendas) ?> - <?= esc($result->nomeCliente) ?></title>
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap5.3.2.min.css" />
     <link rel="stylesheet" href="<?= base_url() ?>assets/font-awesome/css/font-awesome.css" />
@@ -17,26 +17,26 @@
             <header>
                 <?php if ($emitente == null) : ?>
                     <div class="alert alert-danger" role="alert">
-                        Você precisa configurar os dados do emitente. >>> <a href="<?=base_url()?>index.php/mapos/emitente">Configurar</a>
+                        Você precisa configurar os dados do emitente. >>> <a href="<?= base_url() ?>index.php/mapos/emitente">Configurar</a>
                     </div>
                 <?php else : ?>
                     <div class="imgLogo" class="align-middle">
-                        <img src="<?= $emitente->url_logo ?>" class="img-fluid" style="width:140px;">
+                        <img src="<?= esc($emitente->url_logo) ?>" class="img-fluid" style="width:140px;">
                     </div>
                     <div class="emitente">
-                        <span style="font-size: 16px;"><b><?= $emitente->nome ?></b></span><br>
+                        <span style="font-size: 16px;"><b><?= esc($emitente->nome) ?></b></span><br>
                         <?php if ($emitente->cnpj != "00.000.000/0000-00") : ?>
-                            <span class="align-middle">CNPJ: <?= $emitente->cnpj ?></span><br>
+                            <span class="align-middle">CNPJ: <?= esc($emitente->cnpj) ?></span><br>
                         <?php endif; ?>
                         <span class="align-middle">
-                            <?= $emitente->rua.', '.$emitente->numero.', '.$emitente->bairro ?><br>
-                            <?= $emitente->cidade.' - '.$emitente->uf.' - '.$emitente->cep ?>
+                            <?= esc($emitente->rua) . ', ' . esc($emitente->numero) . ', ' . esc($emitente->bairro) ?><br>
+                            <?= esc($emitente->cidade) . ' - ' . esc($emitente->uf) . ' - ' . esc($emitente->cep) ?>
                         </span>
                     </div>
                     <div class="contatoEmitente">
-                        <span style="font-weight: bold;">Tel: <?= $emitente->telefone ?></span><br>
-                        <span style="font-weight: bold;"><?= $emitente->email ?></span><br>
-                        <span style="word-break: break-word;">Vendedor: <b><?= $result->nome ?></b></span>
+                        <span style="font-weight: bold;">Tel: <?= esc($emitente->telefone) ?></span><br>
+                        <span style="font-weight: bold;"><?= esc($emitente->email) ?></span><br>
+                        <span style="word-break: break-word;">Vendedor: <b><?= esc($result->nome) ?></b></span>
                     </div>
                 <?php endif; ?>
             </header>
@@ -59,11 +59,11 @@
                             </thead>
                             <tbody>
                                 <tr>
-                                    <td class="text-center"><?= $result->status ?></td>
+                                    <td class="text-center"><?= esc($result->status) ?></td>
                                     <td class="text-center"><?= date('d/m/Y H:i:s', strtotime($result->dataVenda)) ?></td>
                                     <td class="text-center">
                                         <?php if ($result->garantia > 0): ?>
-                                            <?= $result->garantia . ' dia(s)' ?>
+                                            <?= esc($result->garantia) . ' dia(s)' ?>
                                         <?php else: ?>
                                             Sem garantia
                                         <?php endif; ?>
@@ -88,15 +88,15 @@
                 <div class="subtitle">DADOS DO CLIENTE</div>
                 <div class="dados">
                     <div>
-                        <span><b><?= $result->nomeCliente ?></b></span><br />
-                        <span>CPF/CNPJ: <?= $result->documento ?></span><br />
-                        <span><?= $result->contato_cliente.' '.$result->telefone ?><?= $result->telefone && $result->celular ? ' / '.$result->celular : $result->celular ?></span><br />
-                        <span><?= $result->email ?></span><br />
+                        <span><b><?= esc($result->nomeCliente) ?></b></span><br />
+                        <span>CPF/CNPJ: <?= esc($result->documento) ?></span><br />
+                        <span><?= esc($result->contato_cliente) . ' ' . esc($result->telefone) ?><?= ($result->telefone && $result->celular ? ' / ' . esc($result->celular) : esc($result->celular)) ?></span><br />
+                        <span><?= esc($result->email) ?></span><br />
                     </div>
                     <div style="text-align: right;">
-                        <span><?= $result->rua.', '.$result->numero.', '.$result->bairro ?></span><br />
-                        <span><?= $result->complemento.' - '.$result->cidade.' - '.$result->estado ?></span><br />
-                        <span>CEP: <?= $result->cep ?></span><br />
+                        <span><?= esc($result->rua) . ', ' . esc($result->numero) . ', ' . esc($result->bairro) ?></span><br />
+                        <span><?= esc($result->complemento) . ' - ' . esc($result->cidade) . ' - ' . esc($result->estado) ?></span><br />
+                        <span>CEP: <?= esc($result->cep) ?></span><br />
                     </div>
                 </div>
 
@@ -143,10 +143,10 @@
                     <div class="pagamento">
                         <div class="qrcode">
                             <?php if ($this->data['configuration']['pix_key']) : ?>
-                                <div><img width="130px" src="<?= $qrCode ?>" alt="QR Code de Pagamento" /></div>
+                                <div><img width="130px" src="<?= esc($qrCode) ?>" alt="QR Code de Pagamento" /></div>
                                 <div style="display: flex; flex-wrap: wrap; align-content: center;">
                                     <div style="width: 100%; text-align:center;"><i class="fas fa-camera"></i><br />Escaneie o QRCode ao lado para pagar por Pix</div>
-                                    <div class="chavePix">Chave Pix: <b><?= $chaveFormatada ?></b></div>
+                                    <div class="chavePix">Chave Pix: <b><?= esc($chaveFormatada) ?></b></div>
                                 </div>
                             <?php else: ?>
                                 <div></div>
@@ -196,7 +196,7 @@
                     <span>VENDA <b>#<?= str_pad($result->idVendas, 4, 0, STR_PAD_LEFT) ?></b></span>
                 </div>
                 <div class="vendedor">
-                    <span>Vendedor : <b><?php echo $result->nome; ?> </b></span>
+                    <span>Vendedor : <b><?= esc($result->nome) ?> </b></span>
                 </div>
             </footer>
         </div>
diff --git a/application/views/vendas/imprimirVendaOrcamento.php b/application/views/vendas/imprimirVendaOrcamento.php
index 2b0412dad..87a8a8b02 100644
--- a/application/views/vendas/imprimirVendaOrcamento.php
+++ b/application/views/vendas/imprimirVendaOrcamento.php
@@ -5,7 +5,7 @@
 <html lang="pt-br">
 
 <head>
-    <title><?= $this->config->item('app_name') ?> - Orçamento da Venda Nº#<?= $result->idVendas ?> - <?= $result->nomeCliente ?></title>
+    <title><?= esc($this->config->item('app_name')) ?> - Orçamento da Venda Nº#<?= esc($result->idVendas) ?> - <?= esc($result->nomeCliente) ?></title>
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap5.3.2.min.css" />
     <link rel="stylesheet" href="<?= base_url() ?>assets/font-awesome/css/font-awesome.css" />
@@ -17,25 +17,25 @@
             <header>
                 <?php if ($emitente == null) : ?>
                     <div class="alert alert-danger" role="alert">
-                        Você precisa configurar os dados do emitente. >>> <a href="<?=base_url()?>index.php/mapos/emitente">Configurar</a>
+                        Você precisa configurar os dados do emitente. >>> <a href="<?= base_url() ?>index.php/mapos/emitente">Configurar</a>
                     </div>
                 <?php else : ?>
                     <div class="imgLogo" class="align-middle">
-                        <img src="<?= $emitente->url_logo ?>" class="img-fluid" style="width:140px;">
+                        <img src="<?= esc($emitente->url_logo) ?>" class="img-fluid" style="width:140px;">
                     </div>
                     <div class="emitente">
-                        <span style="font-size: 16px;"><b><?= $emitente->nome ?></b></span><br>
+                        <span style="font-size: 16px;"><b><?= esc($emitente->nome) ?></b></span><br>
                         <?php if ($emitente->cnpj != "00.000.000/0000-00") : ?>
-                            <span class="align-middle">CNPJ: <?= $emitente->cnpj ?></span><br>
+                            <span class="align-middle">CNPJ: <?= esc($emitente->cnpj) ?></span><br>
                         <?php endif; ?>
                         <span class="align-middle">
-                            <?= $emitente->rua.', '.$emitente->numero.', '.$emitente->bairro ?><br>
-                            <?= $emitente->cidade.' - '.$emitente->uf.' - '.$emitente->cep ?>
+                            <?= esc($emitente->rua) . ', ' . esc($emitente->numero) . ', ' . esc($emitente->bairro) ?><br>
+                            <?= esc($emitente->cidade) . ' - ' . esc($emitente->uf) . ' - ' . esc($emitente->cep) ?>
                         </span>
                     </div>
                     <div class="contatoEmitente">
-                        <span style="font-weight: bold;">Tel: <?= $emitente->telefone ?></span><br>
-                        <span style="font-weight: bold;"><?= $emitente->email ?></span><br>
+                        <span style="font-weight: bold;">Tel: <?= esc($emitente->telefone) ?></span><br>
+                        <span style="font-weight: bold;"><?= esc($emitente->email) ?></span><br>
                     </div>
                 <?php endif; ?>
             </header>
@@ -58,11 +58,11 @@
                             </thead>
                             <tbody>
                                 <tr>
-                                    <td class="text-center"><?= $result->status ?></td>
+                                    <td class="text-center"><?= esc($result->status) ?></td>
                                     <td class="text-center"><?= date('d/m/Y', strtotime($result->dataVenda)) ?></td>
                                     <td class="text-center">
                                         <?php if ($result->garantia > 0): ?>
-                                            <?= $result->garantia . ' dia(s)' ?>
+                                            <?= esc($result->garantia) . ' dia(s)' ?>
                                         <?php else: ?>
                                             Sem garantia
                                         <?php endif; ?>
@@ -87,15 +87,15 @@
                 <div class="subtitle">DADOS DO CLIENTE</div>
                 <div class="dados">
                     <div>
-                        <span><b><?= $result->nomeCliente ?></b></span><br />
-                        <span>CPF/CNPJ: <?= $result->documento ?></span><br />
-                        <span><?= $result->contato.' '.$result->telefone ?><?= $result->telefone && $result->celular ? ' / '.$result->celular : $result->celular ?></span><br />
-                        <span><?= $result->emailCliente ?></span><br />
+                        <span><b><?= esc($result->nomeCliente) ?></b></span><br />
+                        <span>CPF/CNPJ: <?= esc($result->documento) ?></span><br />
+                        <span><?= esc($result->contato) . ' ' . esc($result->telefone) ?><?= ($result->telefone && $result->celular ? ' / ' . esc($result->celular) : esc($result->celular)) ?></span><br />
+                        <span><?= esc($result->emailCliente) ?></span><br />
                     </div>
                     <div style="text-align: right;">
-                        <span><?= $result->rua.', '.$result->numero.', '.$result->bairro ?></span><br />
-                        <span><?= $result->complemento.' - '.$result->cidade.' - '.$result->estado ?></span><br />
-                        <span>CEP: <?= $result->cep ?></span><br />
+                        <span><?= esc($result->rua) . ', ' . esc($result->numero) . ', ' . esc($result->bairro) ?></span><br />
+                        <span><?= esc($result->complemento) . ' - ' . esc($result->cidade) . ' - ' . esc($result->estado) ?></span><br />
+                        <span>CEP: <?= esc($result->cep) ?></span><br />
                     </div>
                 </div>
 
@@ -142,10 +142,10 @@
                     <div class="pagamento">
                         <div class="qrcode">
                             <?php if ($this->data['configuration']['pix_key']) : ?>
-                                <div><img width="130px" src="<?= $qrCode ?>" alt="QR Code de Pagamento" /></div>
+                                <div><img width="130px" src="<?= esc($qrCode) ?>" alt="QR Code de Pagamento" /></div>
                                 <div style="display: flex; flex-wrap: wrap; align-content: center;">
                                     <div style="width: 100%; text-align:center;"><i class="fas fa-camera"></i><br />Escaneie o QRCode ao lado para pagar por Pix</div>
-                                    <div class="chavePix">Chave Pix: <b><?= $chaveFormatada ?></b></div>
+                                    <div class="chavePix">Chave Pix: <b><?= esc($chaveFormatada) ?></b></div>
                                 </div>
                             <?php else: ?>
                                 <div></div>
@@ -195,7 +195,7 @@
                     <span>VENDA <b>#<?= str_pad($result->idVendas, 4, 0, STR_PAD_LEFT) ?></b></span>
                 </div>
                 <div class="vendedor">
-                    <span>Vendedor : <b><?php echo $result->nome; ?> </b></span>
+                    <span>Vendedor : <b><?= esc($result->nome) ?> </b></span>
                 </div>
             </footer>
         </div>
diff --git a/application/views/vendas/imprimirVendaTermica.php b/application/views/vendas/imprimirVendaTermica.php
index 3008cb74b..bc80b4163 100644
--- a/application/views/vendas/imprimirVendaTermica.php
+++ b/application/views/vendas/imprimirVendaTermica.php
@@ -3,15 +3,15 @@
 <html lang="pt-br">
 
 <head>
-    <title>Map_Vendas_<?php echo $result->idVendas ?>_<?php echo $result->nomeCliente ?></title>
+    <title>Map_Vendas_<?= esc($result->idVendas) ?>_<?= esc($result->nomeCliente) ?></title>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/bootstrap-responsive.min.css" />
-    <link rel="stylesheet" href="<?php echo base_url(); ?>assets/css/matrix-style.css" />
-    <link href="<?php echo base_url(); ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/bootstrap-responsive.min.css" />
+    <link rel="stylesheet" href="<?= base_url() ?>assets/css/matrix-style.css" />
+    <link href="<?= base_url() ?>assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
     <link href='http://fonts.googleapis.com/css?family=Open+Sans:400,700,800' rel='stylesheet' type='text/css'>
-    <script type="text/javascript" src="<?php echo base_url(); ?>assets/js/jquery-1.10.2.min.js"></script>
+    <script type="text/javascript" src="<?= base_url() ?>assets/js/jquery-1.10.2.min.js"></script>
     <style>
         .table {
             width: 72mm;
@@ -30,25 +30,25 @@
                             <tbody>
                                 <?php if ($emitente == null) { ?>
                                     <tr>
-                                        <td colspan="5" class="alert">Você precisa configurar os dados do emitente. >>><a href="<?php echo base_url(); ?>index.php/mapos/emitente">Configurar</a>
+                                        <td colspan="5" class="alert">Você precisa configurar os dados do emitente. >>><a href="<?= base_url() ?>index.php/mapos/emitente">Configurar</a>
                                             <<<</td> </tr> <?php } else { ?> 
-                                    <td style="width: 25%; text-align: center;"><img src="<?php echo $emitente->url_logo; ?>" style="max-height: 100px"></td>
+                                    <td style="width: 25%; text-align: center;"><img src="<?= esc($emitente->url_logo) ?>" style="max-height: 100px"></td>
                                     <tr>
                                         <td colspan="4" style="text-align: center;"> <span style="font-size: 20px;">
-                                                <b><?php echo $emitente->nome; ?></b></span> </br><span>
-                                                <?php echo 'CNPJ: ' . $emitente->cnpj; ?> </br>
-                                                <?php echo $emitente->rua . ', ' . $emitente->numero . ', ' . $emitente->bairro . ' - ' . $emitente->cidade . ' - ' . $emitente->uf; ?> </span> </br>
-                                            <span><?php echo 'Fone: ' . $emitente->telefone; ?></span>
+                                                <b><?= esc($emitente->nome) ?></b></span> </br><span>
+                                                <?= 'CNPJ: ' . esc($emitente->cnpj) ?> </br>
+                                                <?= esc($emitente->rua) . ', ' . esc($emitente->numero) . ', ' . esc($emitente->bairro) . ' - ' . esc($emitente->cidade) . ' - ' . esc($emitente->uf) ?> </span> </br>
+                                            <span><?= 'Fone: ' . esc($emitente->telefone) ?></span>
                                         </td>
                                     </tr>
                                     <tr>
                                         <td colspan="4" style="width: 100%;"><b>#Venda: </b><span>
-                                                <?php echo $result->idVendas ?></span>
-                                            <span style="padding-inline: 1em">Emissão: <?php echo date('d/m/Y H:i:s'); ?></span>
+                                                <?= esc($result->idVendas) ?></span>
+                                            <span style="padding-inline: 1em">Emissão: <?= date('d/m/Y H:i:s') ?></span>
                                             <?php if ($result->faturado) : ?>
                                                 <br>
                                                 <b>Venc. Garantia: </b>
-                                                <?php echo dateInterval($result->dataVenda, $result->garantia); ?>
+                                                <?= dateInterval($result->dataVenda, $result->garantia) ?>
                                             <?php endif; ?>
                                         </td>
                                     </tr>
@@ -65,14 +65,14 @@
                                                 <span>
                                                     <h5><b>CLIENTE</b></h5>
                                                     <span>
-                                                        <?php echo $result->nomeCliente ?></span><br />
+                                                        <?= esc($result->nomeCliente) ?></span><br />
                                                     <span>
-                                                        <?php echo $result->rua ?>,
-                                                        <?php echo $result->numero ?>,
-                                                        <?php echo $result->bairro ?></span><br />
+                                                        <?= esc($result->rua) ?>,
+                                                        <?= esc($result->numero) ?>,
+                                                        <?= esc($result->bairro) ?></span><br />
                                                     <span>
-                                                        <?php echo $result->cidade ?> -
-                                                        <?php echo $result->estado ?></span>
+                                                        <?= esc($result->cidade) ?> -
+                                                        <?= esc($result->estado) ?></span>
                                             </li>
                                         </ul>
                                     </td>
@@ -107,7 +107,7 @@
                                         <td colspan="3" style="text-align: right"><strong>Total: R$</strong></td>
                                         <td>
                                             <strong>
-                                                <?php echo number_format($totalProdutos, 2, ',', '.'); ?>
+                                                <?= number_format($totalProdutos, 2, ',', '.') ?>
                                             </strong>
                                         </td>
                                     </tr>
@@ -115,7 +115,7 @@
                                         <td colspan="3" style="text-align: right"><strong>Desconto: R$</strong></td>
                                         <td>
                                             <strong>
-                                                <?php echo number_format($result->valor_desconto - $totalProdutos, 2, ',', '.'); ?>
+                                                <?= number_format($result->valor_desconto - $totalProdutos, 2, ',', '.') ?>
                                             </strong>
                                         </td>
                                     </tr>
@@ -123,7 +123,7 @@
                                     <tr>
                                         <td colspan="4" style="text-align: right">
                                             <h4 style="text-align: right">Total: R$
-                                                <?php echo number_format($result->desconto != 0 && $result->valor_desconto != 0 ? $result->valor_desconto : $totalProdutos, 2, ',', '.'); ?>
+                                                <?= number_format($result->desconto != 0 && $result->valor_desconto != 0 ? $result->valor_desconto : $totalProdutos, 2, ',', '.') ?>
                                             </h4>
                                         </td>
                                     </tr>
@@ -132,8 +132,8 @@
                                     <tr>
                                         <td colspan="4" style="text-align: center;">
                                             <img style="margin: 12px 0 0 0;" src="<?= base_url(); ?>assets/img/logo_pix.png" width="64px" alt="QR Code de Pagamento" /><br>
-                                            <img style="margin: 5px 0 0 0;" width="94px" src="<?= $qrCode ?>" alt="QR Code de Pagamento" /><br>
-                                            <span style="margin: 0; font-size: 80%; text-align: center;">Chave PIX: <?= $chaveFormatada ?></span>
+                                            <img style="margin: 5px 0 0 0;" width="94px" src="<?= esc($qrCode) ?>" alt="QR Code de Pagamento" /><br>
+                                            <span style="margin: 0; font-size: 80%; text-align: center;">Chave PIX: <?= esc($chaveFormatada) ?></span>
                                         </td>
                                     </tr>
                                 <?php endif; ?>
@@ -156,8 +156,8 @@
             </div>
         </div>
     </div>
-    <script src="<?php echo base_url(); ?>assets/js/bootstrap.min.js"></script>
-    <script src="<?php echo base_url(); ?>assets/js/matrix.js"></script>
+    <script src="<?= base_url() ?>assets/js/bootstrap.min.js"></script>
+    <script src="<?= base_url() ?>assets/js/matrix.js"></script>
     <script>
         window.print();
     </script>
diff --git a/application/views/vendas/vendas.php b/application/views/vendas/vendas.php
index 77ecea7a8..0a5c53c0d 100644
--- a/application/views/vendas/vendas.php
+++ b/application/views/vendas/vendas.php
@@ -12,10 +12,10 @@
         <h5>Vendas</h5>
     </div>
     <div class="span12" style="margin-left: 0">
-        <form method="get" action="<?php echo base_url(); ?>index.php/vendas/gerenciar">
+        <form method="get" action="<?= base_url() ?>index.php/vendas/gerenciar">
             <?php if ($this->permission->checkPermission($this->session->userdata('permissao'), 'aVenda')) { ?>
                 <div class="span3">
-                    <a href="<?php echo base_url(); ?>index.php/vendas/adicionar" class="button btn btn-mini btn-success" style="max-width: 160px">
+                    <a href="<?= base_url() ?>index.php/vendas/adicionar" class="button btn btn-mini btn-success" style="max-width: 160px">
                         <span class="button__icon"><i class='bx bx-plus-circle'></i></span>
                         <span class="button__text2">Nova Venda</span>
                     </a>
@@ -156,12 +156,12 @@
             </table>
         </div>
     </div>
-    <?php echo $this->pagination->create_links(); ?>
+    <?= $this->pagination->create_links() ?>
 </div>
 
 <!-- Modal -->
 <div id="modal-excluir" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
-    <form action="<?php echo base_url() ?>index.php/vendas/excluir" method="post">
+    <form action="<?= base_url() ?>index.php/vendas/excluir" method="post">
         <div class="modal-header">
             <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
             <h5 id="myModalLabel">Excluir Venda</h5>
diff --git a/application/views/vendas/visualizarVenda.php b/application/views/vendas/visualizarVenda.php
index 8a28aa8f8..a5ed2dc48 100644
--- a/application/views/vendas/visualizarVenda.php
+++ b/application/views/vendas/visualizarVenda.php
@@ -7,7 +7,7 @@
                         <?php
                         $editavel = $this->vendas_model->isEditable($result->idVendas);
 if (($result->faturado != 1 || $editavel) && $this->permission->checkPermission($this->session->userdata('permissao'), 'eVenda')): ?>
-                            <a title="Editar Venda" class="button btn btn-mini btn-success" href="<?php echo base_url() . 'index.php/vendas/editar/' . $result->idVendas; ?>">
+                            <a title="Editar Venda" class="button btn btn-mini btn-success" href="<?= base_url() . 'index.php/vendas/editar/' . $result->idVendas ?>">
                                 <span class="button__icon"><i class="bx bx-edit"></i></span>
                                 <span class="button__text">Editar</span>
                             </a>
@@ -18,14 +18,14 @@
                                 <span class="button__icon"><i class="bx bx-printer"></i></span><span class="button__text">Imprimir</span>
                             </a>
                             <div class="cascading-buttons">
-                                <a target="_blank" title="Imprimir Orcamento A4" class="button btn btn-mini btn-inverse" href="<?php echo site_url() . '/vendas/imprimirVendaOrcamento/' . $result->idVendas; ?>">
+                                <a target="_blank" title="Imprimir Orcamento A4" class="button btn btn-mini btn-inverse" href="<?= site_url() . '/vendas/imprimirVendaOrcamento/' . $result->idVendas ?>">
                                     <span class="button__icon"><i class="bx bx-printer"></i></span>
                                     <span class="button__text">Orçamento</span>
                                 </a>
-                                <a target="_blank" title="Impressão em Papel A4" class="button btn btn-mini btn-inverse" href="<?php echo site_url() ?>/vendas/imprimir/<?php echo $result->idVendas; ?>">
+                                <a target="_blank" title="Impressão em Papel A4" class="button btn btn-mini btn-inverse" href="<?= site_url() ?>/vendas/imprimir/<?= esc($result->idVendas) ?>">
                                     <span class="button__icon"><i class='bx bx-file'></i></span> <span class="button__text">Papel A4</span>
                                 </a>
-                                <a target="_blank" title="Impressão Cupom Não Fiscal" class="button btn btn-mini btn-inverse" href="<?php echo site_url() ?>/vendas/imprimirTermica/<?php echo $result->idVendas; ?>">
+                                <a target="_blank" title="Impressão Cupom Não Fiscal" class="button btn btn-mini btn-inverse" href="<?= site_url() ?>/vendas/imprimirTermica/<?= esc($result->idVendas) ?>">
                                     <span class="button__icon"><i class='bx bx-receipt'></i></span> <span class="button__text">Cupom 80mm</span>
                                 </a>
                             </div>
@@ -51,7 +51,7 @@
                                     <tr>
                                         <td colspan="3" class="alert">
                                             Você precisa configurar os dados do emitente.
-                                            <a href="<?php echo base_url(); ?>index.php/mapos/emitente">Configurar</a>
+                                            <a href="<?= base_url() ?>index.php/mapos/emitente">Configurar</a>
                                         </td>
                                     </tr>
                                 <?php endif; ?>
@@ -64,10 +64,10 @@
                                         <tbody>
                                             <?php if ($emitente == null) { ?>
                                                 <tr>
-                                                    <td colspan="3" class="alert">Você precisa configurar os dados do emitente. >>><a href="<?php echo base_url(); ?>index.php/mapos/emitente">Configurar <<< </a></td>
+                                                    <td colspan="3" class="alert">Você precisa configurar os dados do emitente. >>><a href="<?= base_url() ?>index.php/mapos/emitente">Configurar <<< </a></td>
                                                 </tr>
                                             <?php } ?>
-                                            <h3><i class='bx bx-cart'></i> Venda #<?php echo sprintf('%04d', $result->idVendas) ?></h3>
+                                            <h3><i class='bx bx-cart'></i> Venda #<?= sprintf('%04d', $result->idVendas) ?></h3>
                                         </tbody>
                                     </table>
                                     <table class="table table-condensend">
@@ -76,7 +76,7 @@
                                                 <td style="width: 60%; padding-left: 0">
                                                     <span>
                                                         <h5><b>CLIENTE</b></h5>
-                                                        <span><i class='bx bxs-business'></i> <b><?php echo html_escape($result->nomeCliente) ?></b></span><br />
+                                                        <span><i class='bx bxs-business'></i> <b><?= html_escape($result->nomeCliente) ?></b></span><br />
                                                         <?php if (!empty($result->celular) || !empty($result->telefone) || !empty($result->contato_cliente)): ?>
                                                             <span><i class='bx bxs-phone'></i>
                                                                 <?= !empty($result->contato_cliente) ? html_escape($result->contato_cliente) . ' ' : "" ?>
@@ -101,7 +101,7 @@
 ?>
                                                         <?php if (!empty($result->email)): ?>
                                                             <span>
-                                                                <i class="fas fa-envelope"></i> <?php echo html_escape($result->email) ?>
+                                                                <i class="fas fa-envelope"></i> <?= html_escape($result->email) ?>
                                                             </span><br>
                                                         <?php endif; ?>
                                                     </span>
@@ -113,11 +113,11 @@
                                                                 <h5><b>RESPONSÁVEL</b></h5>
                                                             </span>
                                                             <span><b><i class="fas fa-user"></i>
-                                                                    <?php echo html_escape($result->nome) ?></b></span><br />
+                                                                    <?= html_escape($result->nome) ?></b></span><br />
                                                             <span><i class="fas fa-phone"></i>
-                                                                <?php echo html_escape($result->telefone_usuario) ?></span><br />
+                                                                <?= html_escape($result->telefone_usuario) ?></span><br />
                                                             <span><i class="fas fa-envelope"></i>
-                                                                <?php echo html_escape($result->email_usuario) ?></span>
+                                                                <?= html_escape($result->email_usuario) ?></span>
                                                         </li>
                                                     </ul>
                                                 </td>
@@ -132,20 +132,20 @@
                                 <tbody>
                                     <?php if ($result->dataVenda != null): ?>
                                         <tr>
-                                            <td><b>Status Venda: </b><?php echo $result->status; ?></td>
-                                            <td><b>Data da Venda: </b><?php echo date('d/m/Y', strtotime($result->dataVenda)); ?></td>
-                                            <td><?php if ($result->garantia): ?><b>Garantia: </b><?php echo $result->garantia . ' dia(s)'; ?><?php endif; ?></td>
-                                            <td><?php if (in_array($result->status, ['Finalizado', 'Faturado', 'Orçamento', 'Aberto', 'Em Andamento', 'Aguardando Peças'])): ?><b>Venc. da Garantia: </b><?php echo dateInterval($result->dataVenda, $result->garantia); ?><?php endif; ?></td>
+                                            <td><b>Status Venda: </b><?= esc($result->status) ?></td>
+                                            <td><b>Data da Venda: </b><?= date('d/m/Y', strtotime($result->dataVenda)) ?></td>
+                                            <td><?php if ($result->garantia): ?><b>Garantia: </b><?= esc($result->garantia) . ' dia(s)' ?><?php endif; ?></td>
+                                            <td><?php if (in_array($result->status, ['Finalizado', 'Faturado', 'Orçamento', 'Aberto', 'Em Andamento', 'Aguardando Peças'])): ?><b>Venc. da Garantia: </b><?= dateInterval($result->dataVenda, $result->garantia) ?><?php endif; ?></td>
                                         </tr>
                                     <?php endif; ?>
                                     <?php if ($result->observacoes != null): ?>
                                     <tr>
-                                        <td colspan="4"><b>Observações Internas: </b><?php echo printSafeHtml($result->observacoes); ?></td>
+                                        <td colspan="4"><b>Observações Internas: </b><?= printSafeHtml($result->observacoes) ?></td>
                                     </tr>
                                     <?php endif; ?>
                                     <?php if ($result->observacoes_cliente != null): ?>
                                     <tr>
-                                        <td colspan="4"><b>Observações ao Cliente: </b><?php echo printSafeHtml($result->observacoes_cliente); ?></td>
+                                        <td colspan="4"><b>Observações ao Cliente: </b><?= printSafeHtml($result->observacoes_cliente) ?></td>
                                     </tr>
                                     <?php endif; ?>
                                 </tbody>
@@ -167,11 +167,11 @@
                                         <?php foreach ($produtos as $p): ?>
                                             <?php $totalProdutos += $p->subTotal; ?>
                                             <tr>
-                                                <td style="width: 10%;"><?php echo $p->codDeBarra; ?></td>
-                                                <td style="width: 70%;"><?php echo $p->descricao; ?></td>
-                                                <td style="width: 5%;"><?php echo $p->quantidade; ?></td>
-                                                <td style="width: 10%;">R$ <?php echo($p->preco ?: $p->precoVenda); ?></td>
-                                                <td style="width: 10%;">R$ <?php echo number_format($p->subTotal, 2, ',', '.'); ?></td>
+                                                <td style="width: 10%;"><?= esc($p->codDeBarra) ?></td>
+                                                <td style="width: 70%;"><?= esc($p->descricao) ?></td>
+                                                <td style="width: 5%;"><?= esc($p->quantidade) ?></td>
+                                                <td style="width: 10%;">R$ <?= ($p->preco ?: $p->precoVenda) ?></td>
+                                                <td style="width: 10%;">R$ <?= number_format($p->subTotal, 2, ',', '.') ?></td>
                                             </tr>
                                         <?php endforeach; ?>
                                     </tbody>
@@ -179,12 +179,12 @@
                                 <hr>
                                 <div style="text-align: right;">
                                 <?php if ($result->valor_desconto != 0 && $result->desconto != 0): ?>
-                                    <h4>SUBTOTAL: R$ <?php echo number_format($totalProdutos, 2, ',', '.'); ?></h4>
-                                    <h4>DESCONTO: R$ <?php echo number_format($result->valor_desconto - $totalProdutos, 2, ',', '.'); ?></h4>
-                                    <h4>TOTAL: R$ <?php echo number_format($result->valor_desconto, 2, ',', '.'); ?></h4>
+                                    <h4>SUBTOTAL: R$ <?= number_format($totalProdutos, 2, ',', '.') ?></h4>
+                                    <h4>DESCONTO: R$ <?= number_format($result->valor_desconto - $totalProdutos, 2, ',', '.') ?></h4>
+                                    <h4>TOTAL: R$ <?= number_format($result->valor_desconto, 2, ',', '.') ?></h4>
 
                                 <?php else: ?>
-                                    <h4 style="text-align: right">TOTAL: R$ <?php echo number_format($totalProdutos, 2, ',', '.'); ?></h4>
+                                    <h4 style="text-align: right">TOTAL: R$ <?= number_format($totalProdutos, 2, ',', '.') ?></h4>
                                 <?php endif; ?>
                                 </div>
                             <?php endif; ?>
@@ -208,9 +208,9 @@
     <div class="modal-body">
         <div class="span12" id="div-pix" style="text-align: center">
             <td style="width: 15%; padding: 0;text-align:center;">
-                <img src="<?php echo base_url(); ?>assets/img/logo_pix.png" alt="QR Code de Pagamento" /></br>
-                <img id="qrCodeImage" width="50%" src="<?= $qrCode ?>" alt="QR Code de Pagamento" /></br>
-                <?php echo '<span>Chave PIX: ' . $chaveFormatada . '</span>'; ?></br>
+                <img src="<?= base_url() ?>assets/img/logo_pix.png" alt="QR Code de Pagamento" /></br>
+                <img id="qrCodeImage" width="50%" src="<?= esc($qrCode) ?>" alt="QR Code de Pagamento" /></br>
+                <?= '<span>Chave PIX: ' . esc($chaveFormatada) . '</span>' ?></br>
                 <?php if ($totalProdutos != 0) {
                     if ($result->valor_desconto != 0) {
                         echo "Valor Total: R$ " . number_format($result->valor_desconto, 2, ',', '.');
@@ -281,7 +281,7 @@
         var imageData = context.getImageData(0, 0, canvas.width, canvas.height);
         var code = jsQR(imageData.data, imageData.width, imageData.height);
         if (code) {
-            var whatsappLink = 'https://api.whatsapp.com/send?phone=55' + <?= isset($zapnumber) ? $zapnumber : "" ?> + '&text=' + code.data;
+            var whatsappLink = 'https://api.whatsapp.com/send?phone=55' + <?= esc_js($zapnumber ?? '') ?> + '&text=' + encodeURIComponent(code.data);
             window.open(whatsappLink, '_blank');
         } else {
             swal({
diff --git a/composer.json b/composer.json
index 16002acdd..ba1c7923a 100644
--- a/composer.json
+++ b/composer.json
@@ -24,6 +24,15 @@
     "scripts": {
         "format": [
             "application/vendor/bin/php-cs-fixer fix"
+        ],
+        "format:check": [
+            "application/vendor/bin/php-cs-fixer fix --dry-run --diff"
+        ],
+        "xss:check": [
+            "@php tools/check_view_escaping.php"
+        ],
+        "xss:baseline": [
+            "@php tools/check_view_escaping.php --update-baseline"
         ]
     },
     "config": {
diff --git a/tools/.htaccess b/tools/.htaccess
new file mode 100644
index 000000000..76253143a
--- /dev/null
+++ b/tools/.htaccess
@@ -0,0 +1,7 @@
+<IfModule mod_authz_core.c>
+    Require all denied
+</IfModule>
+<IfModule !mod_authz_core.c>
+    Order allow,deny
+    Deny from all
+</IfModule>
diff --git a/tools/check_view_escaping.php b/tools/check_view_escaping.php
new file mode 100644
index 000000000..32c7c07b7
--- /dev/null
+++ b/tools/check_view_escaping.php
@@ -0,0 +1,458 @@
+<?php
+
+/**
+ * check_view_escaping - guards application/views against unescaped output.
+ *
+ * Runs three independent checks over every view:
+ *
+ *   1. Escaping: value expressions that reach the page without going through an
+ *      escaper, for the wrong output context.
+ *   2. Shape: values whose *type* the chosen escaper changes, such as a
+ *      JSON.parse() fed an escaper that emits a bare JSON value.
+ *   3. Pre-rendered markup: values that already hold finished HTML being
+ *      wrapped in an escaper, which breaks the page instead of protecting it.
+ *
+ * All three fail when they appear and are not in the baseline.
+ *
+ * Usage:
+ *   php tools/check_view_escaping.php                  # check (exit 1 on new findings)
+ *   php tools/check_view_escaping.php --update-baseline
+ *   php tools/check_view_escaping.php --no-baseline    # report everything
+ *
+ * Baseline entries are "relative/path.php|snippet" so they survive unrelated
+ * line shifts. Review every entry: each one is a deliberate decision to leave
+ * a value unescaped.
+ */
+
+if (PHP_SAPI !== 'cli') {
+    http_response_code(403);
+    exit("This script can only be run from the command line.\n");
+}
+
+$root = dirname(__DIR__);
+$viewDir = $root . '/application/views';
+$baselineFile = __DIR__ . '/xss-baseline.txt';
+$updateBaseline = in_array('--update-baseline', $argv, true);
+$ignoreBaseline = in_array('--no-baseline', $argv, true);
+
+/**
+ * Variables that carry finished, pre-rendered markup.
+ *
+ * These come from $this->load->view($name, $data, true) or from markup the
+ * controller built by hand, so the view must emit them raw. Escaping one is
+ * not merely redundant: htmlspecialchars() turns the markup into visible text
+ * and neutralises any <script> nested inside it, which silently disables the
+ * behaviour that view was included for.
+ *
+ * Kept as one list because both the skip rules below and the
+ * preRenderedEscaped() check read it, so the two cannot drift apart.
+ */
+$preRendered = ['$topo', '$custom_error', '$modalGerarPagamento'];
+
+// Expressions that are already safe or intentionally raw.
+$skipIfContains = [
+    'esc(', 'esc_js(', 'esc_url(', 'esc_css(', 'esc_msg(', 'esc_json(',
+    'html_escape(', 'htmlspecialchars(', 'printSafeHtml(', 'xss_clean(',
+    'base_url(', 'site_url(', 'current_url(', 'uri_string(', 'index_page(',
+    'date(', 'number_format(', 'intval(', 'str_pad(', 'str_replace(', 'ucfirst(',
+    'strtoupper(', 'strtolower(', 'ucwords(', 'json_encode(', 'sprintf(',
+    'round(', 'floor(', 'ceil(', 'abs(', 'trim(', 'nl2br(', 'wordwrap(',
+    'limitarTexto(', 'money_format(', 'count(', 'implode(', 'dateInterval(',
+    'form_hidden(', 'form_dropdown(', 'form_input(', 'form_password(',
+    'form_checkbox(', 'form_submit(', 'form_button(', 'form_label(',
+    'form_open(', 'form_close(', 'set_value(', 'config_item(',
+    '$this->config->item(', '$this->uri->segment(',
+    '$this->security->get_csrf', '$this->load->', '$this->db->count_all(',
+    '$this->permission->', '$this->pagination->',
+    // Ternaries that emit only literal keywords.
+    "'selected'", '"selected"', "'disabled'", '"disabled"', "'checked'", '"checked"',
+    ...$preRendered,
+];
+
+$echoShapes = [
+    ['re' => '/<\?=\s*(.+?)\s*\?>/s', 'kind' => 'echo'],
+    ['re' => '/<\?php\s+echo\s+(.+?);?\s*\?>/s', 'kind' => 'echo'],
+    ['re' => '/<\?php\s+print\(\s*(.+?)\s*\);?\s*\?>/s', 'kind' => 'print'],
+    ['re' => '/<\?php\s+print\s+(.+?);?\s*\?>/s', 'kind' => 'print'],
+];
+
+function isBareValue(string $e): bool
+{
+    return (bool) preg_match('/^\$[A-Za-z_][A-Za-z0-9_]*(\s*->\s*[A-Za-z_][A-Za-z0-9_]*|\s*\[[^\[\]]*\])*$/', trim($e));
+}
+
+function isSessionValue(string $e): bool
+{
+    return (bool) preg_match('/^\$this->session->userdata\(.*\)$/s', trim($e));
+}
+
+function splitTopLevel(string $expr): ?array
+{
+    $quote = null;
+    $depth = 0;
+    $operands = [];
+    $current = '';
+
+    for ($i = 0, $n = strlen($expr); $i < $n; $i++) {
+        $ch = $expr[$i];
+
+        if ($quote !== null) {
+            $current .= $ch;
+            if ($ch === '\\') {
+                $i++;
+                $current .= $expr[$i] ?? '';
+            } elseif ($ch === $quote) {
+                $quote = null;
+            }
+
+            continue;
+        }
+
+        if ($ch === "'" || $ch === '"') {
+            $quote = $ch;
+            $current .= $ch;
+
+            continue;
+        }
+
+        if ($ch === '(' || $ch === '[') {
+            $depth++;
+        } elseif ($ch === ')' || $ch === ']') {
+            $depth--;
+        }
+
+        if ($depth === 0 && $ch === '.') {
+            $operands[] = $current;
+            $current = '';
+
+            continue;
+        }
+
+        $current .= $ch;
+    }
+
+    if ($quote !== null || $depth !== 0) {
+        return null;
+    }
+
+    $operands[] = $current;
+
+    return count($operands) > 1 ? $operands : null;
+}
+
+function splitTernary(string $expr): ?array
+{
+    $quote = null;
+    $depth = 0;
+    $q = null;
+
+    for ($i = 0, $n = strlen($expr); $i < $n; $i++) {
+        $ch = $expr[$i];
+
+        if ($quote !== null) {
+            if ($ch === '\\') {
+                $i++;
+            } elseif ($ch === $quote) {
+                $quote = null;
+            }
+
+            continue;
+        }
+
+        if ($ch === "'" || $ch === '"') {
+            $quote = $ch;
+
+            continue;
+        }
+
+        if ($ch === '(' || $ch === '[') {
+            $depth++;
+
+            continue;
+        }
+
+        if ($ch === ')' || $ch === ']') {
+            $depth--;
+
+            continue;
+        }
+
+        if ($depth !== 0) {
+            continue;
+        }
+
+        if ($ch === '?') {
+            $q = $i;
+        } elseif ($ch === ':' && $q !== null) {
+            return [
+                substr($expr, 0, $q),
+                substr($expr, $q + 1, $i - $q - 1),
+                substr($expr, $i + 1),
+            ];
+        }
+    }
+
+    return null;
+}
+
+/**
+ * Returns the escaped form of an expression, or null when the expression is
+ * already safe. A non-null return means "this value reaches the page raw".
+ */
+function unescaped(string $expr, array $skipIfContains, int $depth = 0): ?string
+{
+    $expr = trim($expr);
+
+    if ($expr === '' || strlen($expr) > 300 || $depth > 3) {
+        return null;
+    }
+
+    foreach ($skipIfContains as $needle) {
+        if (str_contains($expr, $needle)) {
+            return null;
+        }
+    }
+
+    if (preg_match('/\b(if|foreach|for|while|switch|function|return|echo|print|try|catch)\b/', $expr)) {
+        return null;
+    }
+
+    if (str_contains($expr, ';') || str_contains($expr, '?>') || str_contains($expr, '<?')) {
+        return null;
+    }
+
+    if (preg_match('/(?<!-)[<>]/', $expr)) {
+        return null;
+    }
+
+    if (isBareValue($expr) || isSessionValue($expr)) {
+        return $expr;
+    }
+
+    $ternary = splitTernary($expr);
+    if ($ternary !== null) {
+        [, $then, $else] = $ternary;
+        $hits = [];
+
+        foreach ([$then, $else] as $branch) {
+            $hit = unescaped($branch, $skipIfContains, $depth + 1);
+            if ($hit !== null) {
+                $hits[] = trim($hit);
+            }
+        }
+
+        return $hits === [] ? null : implode(' , ', $hits);
+    }
+
+    $operands = splitTopLevel($expr);
+    if ($operands !== null) {
+        $hits = [];
+        foreach ($operands as $operand) {
+            $hit = unescaped($operand, $skipIfContains, $depth + 1);
+            if ($hit !== null) {
+                $hits[] = trim($hit);
+            }
+        }
+
+        return $hits === [] ? null : implode(' , ', $hits);
+    }
+
+    return null;
+}
+
+/**
+ * Detects JSON.parse() being fed a PHP echo of one of the escapers.
+ *
+ * None of the escapers can produce the string argument JSON.parse() expects:
+ * esc_json() and esc_js() emit a bare JSON value with no surrounding quotes,
+ * and esc() emits HTML entities that corrupt the payload. The config has to be
+ * assigned directly instead, e.g. `var cfg = <?= esc_json($arr) ?>;`.
+ *
+ * esc_js(json_encode($x)) is the one legitimate spelling and is allowed.
+ *
+ * Returns the offending snippet, or null when every call is well formed.
+ */
+function jsonParseEscaper(string $content): ?string
+{
+    $re = '/JSON\.parse\(\s*["\']?\s*<\?(?:=\s*esc(?:_js|_json)?\s*\(|php\s+echo\s+esc(?:_js|_json)?\s*\()(.*?)\?>(?:\s*["\'])?\s*\)?/s';
+
+    if (! preg_match_all($re, $content, $matches, PREG_OFFSET_CAPTURE)) {
+        return null;
+    }
+
+    foreach ($matches[0] as $i => $m) {
+        if (str_contains($matches[1][$i][0], 'json_encode(')) {
+            continue;
+        }
+
+        return (string) preg_replace('/\s+/', ' ', trim($m[0]));
+    }
+
+    return null;
+}
+
+const JSON_PARSE_PREFIX = 'json-parse: ';
+const PRE_RENDERED_PREFIX = 'prerendered-esc: ';
+
+/**
+ * Detects a pre-rendered markup variable being wrapped in an HTML escaper.
+ *
+ * $preRendered values are already finished markup, so escaping them breaks the
+ * page instead of protecting it. This is the inverse of the skip rule that
+ * accepts them raw, and it catches the mistake of adding the escaper later.
+ *
+ * The match is anchored on the escaper wrapping the variable directly, so a
+ * genuinely raw value such as esc($result->idOs) is not reported. The known
+ * limitation is that it cannot see markup carried by a variable that is not
+ * listed in $preRendered, nor one hidden behind a call such as trim().
+ *
+ * Returns the offending snippet, or null when nothing is mis-escaped.
+ */
+function preRenderedEscaped(string $content, array $preRendered): ?string
+{
+    $vars = implode('|', array_map(fn ($v) => preg_quote($v, '/'), $preRendered));
+    $re = '/\b(?:esc|esc_html|html_escape|htmlspecialchars)\(\s*(' . $vars . ')\s*\)/';
+
+    if (! preg_match($re, $content, $m)) {
+        return null;
+    }
+
+    return (string) preg_replace('/\s+/', ' ', trim($m[0]));
+}
+
+$findings = [];
+$rii = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($viewDir));
+
+foreach ($rii as $file) {
+    if ($file->isDir() || $file->getExtension() !== 'php') {
+        continue;
+    }
+
+    $path = $file->getPathname();
+    $rel = str_replace($root . '/', '', $path);
+    $content = file_get_contents($path);
+    $seen = [];
+
+    foreach ($echoShapes as $shape) {
+        if (! preg_match_all($shape['re'], $content, $matches, PREG_OFFSET_CAPTURE)) {
+            continue;
+        }
+
+        foreach ($matches[1] as $m) {
+            $hit = unescaped($m[0], $skipIfContains);
+            if ($hit === null) {
+                continue;
+            }
+
+            $snippet = (string) preg_replace('/\s+/', ' ', trim($hit));
+            $key = $rel . '|' . $snippet;
+            if (isset($seen[$key])) {
+                continue;
+            }
+            $seen[$key] = true;
+            $findings[$key] = $snippet;
+        }
+    }
+
+    $snippet = jsonParseEscaper($content);
+    if ($snippet !== null) {
+        $key = $rel . '|' . JSON_PARSE_PREFIX . $snippet;
+        $findings[$key] = $snippet;
+    }
+
+    $snippet = preRenderedEscaped($content, $preRendered);
+    if ($snippet !== null) {
+        $key = $rel . '|' . PRE_RENDERED_PREFIX . $snippet;
+        $findings[$key] = $snippet;
+    }
+}
+
+ksort($findings);
+
+if ($updateBaseline) {
+    $lines = [];
+    foreach (array_keys($findings) as $key) {
+        $lines[] = '# ' . $findings[$key] . PHP_EOL . $key . PHP_EOL;
+    }
+    file_put_contents($baselineFile, implode(PHP_EOL, $lines));
+    echo 'Baseline written with ', count($findings), " entries.\n";
+    exit(0);
+}
+
+$baseline = [];
+if (! $ignoreBaseline && is_file($baselineFile)) {
+    foreach (file($baselineFile, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
+        $line = trim($line);
+        if ($line !== '' && ! str_starts_with($line, '#')) {
+            $baseline[$line] = true;
+        }
+    }
+}
+
+$new = array_diff_key($findings, $baseline);
+$stale = array_diff_key($baseline, $findings);
+
+echo 'Views scanned      : ', iterator_count(new RecursiveIteratorIterator(new RecursiveDirectoryIterator($viewDir))), "\n";
+echo 'Findings           : ', count($findings), "\n";
+echo 'Baseline entries   : ', count($baseline), "\n";
+echo 'New (unsuppressed) : ', count($new), "\n";
+echo 'Stale baseline     : ', count($stale), "\n";
+
+if ($new) {
+    $unescaped = [];
+    $badParse = [];
+    $badPreRendered = [];
+
+    foreach ($new as $key => $snippet) {
+        if (str_contains($key, '|' . JSON_PARSE_PREFIX)) {
+            $badParse[$key] = $snippet;
+        } elseif (str_contains($key, '|' . PRE_RENDERED_PREFIX)) {
+            $badPreRendered[$key] = $snippet;
+        } else {
+            $unescaped[$key] = $snippet;
+        }
+    }
+
+    if ($unescaped) {
+        echo "\nUnescaped output not present in the baseline:\n";
+        foreach ($unescaped as $key => $snippet) {
+            echo '  ', $key, "\n      raw: ", $snippet, "\n";
+        }
+        echo "\nFix by wrapping the value in esc() (or esc_js/esc_url/esc_css for\n";
+        echo "JS/URL/CSS contexts). If the value is intentionally pre-rendered or\n";
+        echo "literal markup, run: php tools/check_view_escaping.php --update-baseline\n";
+    }
+
+    if ($badParse) {
+        echo "\nJSON.parse() fed a value that is not a string:\n";
+        foreach ($badParse as $key => $snippet) {
+            echo '  ', $key, "\n      raw: ", $snippet, "\n";
+        }
+        echo "\nesc_json() and esc_js() already emit a bare JSON value, and esc() emits\n";
+        echo "HTML entities, so JSON.parse() can never receive a usable string. Drop\n";
+        echo "the JSON.parse() call and assign the value directly:\n";
+        echo '    var config = <?= esc_json($arr) ?>;' . "\n";
+    }
+
+    if ($badPreRendered) {
+        echo "\nPre-rendered markup escaped as if it were a plain value:\n";
+        foreach ($badPreRendered as $key => $snippet) {
+            echo '  ', $key, "\n      raw: ", $snippet, "\n";
+        }
+        echo "\nThese variables already hold finished markup, produced by\n";
+        echo "load->view(\$name, \$data, true) or built by the controller. Escaping one\n";
+        echo "turns the markup into visible text and neutralises any <script> nested\n";
+        echo "inside it. Emit it raw instead; the interpolations inside the view were\n";
+        echo "already escaped where the view builds them:\n";
+        echo '    <?= $modalGerarPagamento ?>' . "\n";
+    }
+}
+
+if ($stale) {
+    echo "\nBaseline entries that no longer match (safe to prune):\n";
+    foreach (array_keys($stale) as $key) {
+        echo '  ', $key, "\n";
+    }
+}
+
+exit($new ? 1 : 0);
diff --git a/tools/xss-baseline.txt b/tools/xss-baseline.txt
new file mode 100644
index 000000000..dc416bdad
--- /dev/null
+++ b/tools/xss-baseline.txt
@@ -0,0 +1,10 @@
+# Baseline for tools/check_view_escaping.php
+#
+# Each entry is "application/views/relative/path.php|value expression" for a
+# place where a value intentionally reaches the page without an escaper.
+# Comment lines above an entry explain why.
+#
+# This file is intentionally empty: every view output is currently escaped.
+# Run `php tools/check_view_escaping.php --update-baseline` after adding an
+# entry on purpose, and review the diff - each line is a decision to leave a
+# value unescaped.